3 ms·
> Once a site gets big, does it just get too hard to scale or adapt to the third-party provider? Or too expensive compared to doing it yourself. There's also
by madhadron 7y ago
> Once a site gets big, does it just get too hard to scale or adapt to the third-party provider?
Or too expensive compared to doing it yourself.
There's also a difference between rolling your own crypto and rolling your own auth. Leave the actual hash to experts and use NaCL's argon2 implementation. The salt+hash are just more user metadata that aren't super sensitive given modern password hashing algorithms.
- rococode 7y agoYeah, the cost gets super important. Once upon a time, our company considered using Auth0. Then we noticed that you have to pay nearly 25 cents per active user per month. I can possibly see the value for B2B, but if you're B2C good luck dealing with an extra 25 cents cut from your margins for every single user you have, paying or not.
- scarface74 7y agoIf a site is big and can’t afford a third party provider, doesn’t that say more about the business model of a site?
- jammygit 7y agoI found bcrypt was easier to set up than argon2. Apparently argon2 can be misconfigured if you are not familiar enough with it