3 ms·
Still better than no hashing. Still a tough nut to crack if it's hashed plus salted with unique salt.
by whatevaa 9y ago
Still better than no hashing. Still a tough nut to crack if it's hashed plus salted with unique salt.
- oldcynic 9y agoUgh. It's supposed to be Best Practices, rather than better than nothing, and is ostensibly from Google. So should be limiting to the appropriate choices: bcrypt, scrypt, PBKDF2 or Argon2.
- user5994461 9y agoNot everyone can used the last hype algorithm, whether because of library support, regulations or technical constraints.
- mediumdeviation 9y agobcrypt is old enough to vote this year
- cyberfart 9y agostill can't drink in US though
- isostatic 9y agoSomething they acknowledge later with SMS being a bad idea, but may be the best option for a specific workflow.