3 ms·
Won't the advice in that cursory blog post expose the plaintext to query logs? IMHO doing the hashing and password comparison in application code has benefits
by sk5t 6y ago
Won't the advice in that cursory blog post expose the plaintext to query logs?
IMHO doing the hashing and password comparison in application code has benefits in both shifting the compute workload to horizontally scalable non-db workers and keeping the plaintext off the wire/queries.