> Do you think it is better than nothing? No. This is security theater, and it stands as an obstacle to security. They were better off with plaintext. > I cou

> Do you think it is better than nothing? No. This is security theater, and it stands as an obstacle to security. They were better off with plaintext. > I could set my bar higher, but for living in the real world and that a higher bar would conflict with the high bar of assuming people are of good will and doing the best they can. Or you could just point PHP developers to my open source libraries, which have a cost of $0.00 to use and are actually secure?