It looks like he just misread this article, which is kind of a disaster itself -- it recommends storing MD5 hashes of passwords, maybe with a salt if you want t

It looks like he just misread this article, which is kind of a disaster itself -- it recommends storing MD5 hashes of passwords, maybe with a salt if you want to be extra secure. http://www.skrenta.com/2007/08/md5_tutorial.html http://www.skrenta.com/2007/08/md5_tutorial.html Edit: Oh dear, there's a followup post: http://www.skrenta.com/2007/08/crypto_vs_the_working_coder.html http://www.skrenta.com/2007/08/crypto_vs_the_working_coder.h...