3 ms·

I use single salt SHA256 hashing for all HTTP login. https://github.com/tinspin/rupy/blob/master/src/se/rupy/http/User.java#L126 https://github.com/tinspin/rup

by bullen 8y ago

I use single salt SHA256 hashing for all HTTP login. https://github.com/tinspin/rupy/blob/master/src/se/rupy/http/User.java#L126 https://github.com/tinspin/rupy/blob/master/src/se/rupy/http... It's secure and solves this problem too.

minitech 8y ago
How does it solve this problem? A single SHA-256 isn’t a significant amount of work.
- bullen 8y ago
  You can just loop it to require more CPU. Dynamically even! So it solves this problem AND it's secure! No brainer. But you can keep using HTTPS if you want.