3 ms·
1st rule of cryptography - don't try it at home. You'll get it wrong. There are any number of standard ways to protect passwords, there's no need for them to be
by bcl 15y ago
1st rule of cryptography - don't try it at home. You'll get it wrong. There are any number of standard ways to protect passwords, there's no need for them to be reaching for the bottle of Snake Oil.
- cvandyck76 15y agoExactly. Security through obscurity does not work (for long, at least).
- boyter 15y agoRocky Heckman who is a security specialist as Microsoft http://blogs.msdn.com/b/rockyh/ http://blogs.msdn.com/b/rockyh/ summed it up in the best way I have heard so far. "Don’t write your own Crypto algorithms unless you have a Doctorate in Cryptography."
- khafra 15y agoI think Thomas Ptacek takes it a necessary step further: "Don't implement crypto." Even if you're using a good algorithm, your implementation of it will have holes. The trouble is that the normal exploratory programming technique that gets a MVP up and running doesn't find security holes.