3 ms·
Passwords -- The down and dirty.
- adamdecaf 16y agoThis is my first security related article, thus I'm looking for suggestions and comments. Thanks
- mooism2 16y agoWhy no mention of key strengthening? http://en.wikipedia.org/wiki/Key_strengthening http://en.wikipedia.org/wiki/Key_strengthening
- parenthesis 16y agoOf course, dealing with passwords properly on the server is only one side of the story. If the connection between client and server is not secure, then an attacker could intercept a user's password as it travels in plaintext from client to server. And if a user's login persists by the use of a cookie, an attacker could impersonate a logged-in user by using their cookie, after intercepting it as it is sent in plaintext in every request from client to server.
- adamdecaf 16y agoCorrect, I felt that those were outside of the scope of the post though. However, as I think about it more they seem fit better and better.