> There should be no reason to hide your cryptography method provided that it is secure. I'm totally with you, and I suspect we may see a more technical explan

> There should be no reason to hide your cryptography method provided that it is secure. I'm totally with you, and I suspect we may see a more technical explanation of the event in the coming days. That said, this is a tough situation for Valve. They have many sorts of users, many of them who have no idea what MD5 hashing is or why it would be awful to use. You're already delivering bad news, so it may be wise not to make nontechnical users feel further discomfort at confronting terminology they don't understand. In this, I feel like Valve has banked enough credibility for me to trust for the moment that they can evaluate their security and say "Oh, fuck, this will be cracked and it's only a matter of time," and then communicate that in clear terms in their message.