3 ms·
Don't sites also salt (and pepper?) passwords though? Does this still apply in the scenario that they have done so? Edit: Realised Google exists, currently rea
by corobo 9y ago
Don't sites also salt (and pepper?) passwords though? Does this still apply in the scenario that they have done so?
Edit: Realised Google exists, currently reading https://stackoverflow.com/questions/16891729/best-practices-salting-peppering-passwords https://stackoverflow.com/questions/16891729/best-practices-...
- Bartweiss 9y agoThat math is for fast hashes without salting, agreed. Of course, plenty of sites that lose passwords also make those mistakes...
- dspillett 9y ago> Don't sites also salt (and pepper?) passwords though? They should salt. They should do many things. But we know some sites don't, we suspect many sites don't. Unless you know otherwise never assume a site is handling your data, including your login credentials, securely.