3 ms·
For those who don’t specialize in security, this is not an accepted practice. OWASP is a wiki that anyone with an idea can edit, and there are some bad ones on
by lawnchair_larry 6y ago
For those who don’t specialize in security, this is not an accepted practice. OWASP is a wiki that anyone with an idea can edit, and there are some bad ones on there.
- Jwarder 6y agoWhat's wrong with it? I don't specialize in security, but I've seen peppers/global-salts in most of the "serious" password storage schemes I've seen. Looks like an easy layer of protection to limit brute forcing hashes from data dumps.