3 ms·
Would it be an okay practice to prepend the username as extra salt, still using the randomly generated salt?
by swsieber 9y ago
Would it be an okay practice to prepend the username as extra salt, still using the randomly generated salt?
- ad-hominem 9y agoNo, the hashed passwords will be way too salty and will throw off the flavor of the app
- Amorymeltzer 9y agoWhy not just use a longer salt? The username is only going to reduce randomness. Moreover, I don't buy the presumed advantage: nobody is really parsing that message to mean someone else could have the same password.
- marcosdumay 9y agoBe careful about how you merge the username and the random salt.