5 ms·
Not really, in the event of a leak, two hashed passwords leaks less information than a hashed password and an email address. Why have 2 not 1. Well one of them
by quickthrower2 8y ago
Not really, in the event of a leak, two hashed passwords leaks less information than a hashed password and an email address.
Why have 2 not 1. Well one of them has to be globally unique on the site, the other has to be hard to guess. Two different requirements.
- groestl 8y agoYou can say that for sufficiently high values of hard, "hard to guess" implies "globally unique".