2 ms·
Whoops, I will stand corrected. Casting my eye over the recommendations in the pages I linked - yes some of it seems to be a little behind the times (for insta
by chrismsnz 15y ago
Whoops, I will stand corrected.
Casting my eye over the recommendations in the pages I linked - yes some of it seems to be a little behind the times (for instance, adaptive hashing isn't mentioned once in terms of securing passwords), but none of it seems outright terrible.
Is this something that the crypto community/experts can come together and improve the same way as the vuln/exploit security community have made OWASP what it is?
Or is the real truth that executing proper crypto techniques are simply to difficult to boil down into a pile of cheatsheets?