4 ms·
The article explains very well how salted hashes don't help against username lookups.
by lolc 9y ago
The article explains very well how salted hashes don't help against username lookups.
- jwilliams 9y agoIn the case of salts, the article admits "Don’t get me wrong, this does make it significantly harder to attack a leaked database to unmask every user..." So salts definitely do help. And if you chose your salt well (e.g. global fixed/rotating plus local/temporal) you significantly increase your protection compared to not using a salt at all.