3 ms·
I have already been using salted BCrypt since day one. I know how important security is.
by zhoutong 15y ago
I have already been using salted BCrypt since day one. I know how important security is.
- MatthewPhillips 15y agoSalting is unnecessary.
- getsat 15y agoIf you're not already, use Devise. https://github.com/plataformatec/devise https://github.com/plataformatec/devise It's ballin'. Bcrypt by default, too.
- zhoutong 15y agoDevise has too many features that I don't really need. I followed Ryan Bates's advice - use nifty:authentication generator.
- getsat 15y agoYou can choose which features you use. For instance, I've never used the single sign on/access token functionality. The reset password, account lockouts, etc. are awesome.