5 ms·
This provides no real defence against dictionary attacks; the attacker's work just doubles.
by Ar-Curunir 8y ago
This provides no real defence against dictionary attacks; the attacker's work just doubles.
- gpm 8y agoNo, it doesn't. It does however provide defense against taking over the server, stealing everyone's passwords, and using them on other servers. I'm assuming, and I suppose I should have stated above, that the first hash is salted with something like the domain name. Even if not it provides the same level of protection for password generation schemes.