4 ms·
I implemented a personal tool based on the same principle. I decided having a config was worthwhile and then you could just add a "version number" to the salt.
by blamestross 4y ago
I implemented a personal tool based on the same principle. I decided having a config was worthwhile and then you could just add a "version number" to the salt. Having a config provides the vulnerability of listing what sites you use, but let's you add things like a per-website salt.
- archi42 4y agoI would underestimate one critical advantage of your system: If the site changes their URL for some reason (depends on which components you use) you can just look up the old URL in your database. Without that, good luck figuring out that it was sea.customer-sso.auth.example.com/portal/login.jsp :)
- blamestross 4y agoThis happened when cbs rebranded to paramount
- blamestross 4y agoI also ended up making a DSL for making passwords compatible with arbitrary dumb password requirements.
- deleted 4y ago[deleted]