3 ms·
daeken thanks for your knowledge. We should follow your example of understanding how things works instead of repeating "use bcrypt".
by antirez 15y ago
daeken thanks for your knowledge. We should follow your example of understanding how things works instead of repeating "use bcrypt".
- michaelfairley 15y agoIf iterated SHA1 and bcrypt are (all other things equal) equally secure, but you're more likely to mess up while implementing your own iterated SHA1, then bcrypt is more secure.
- tptacek 15y agoI agree, but we could do worse than to have "bcrypt" be the lay developer's default answer. All that is is annoying, whereas "secret salt construction using Whirlpool as the hash" or- whatever- craziness is actually dangerous. Your code is neat. I don't care what hash you use. I'm just saying.
- bhousel 15y agoUse bcrypt, if for no other reason than that your code is likely to be forked by people who don't want to understand how things work.