2 ms·
Or you can just use SHA-256 instead and not bother with subtle details about which uses are safe and which are not.
by Joker_vD 3y ago
Or you can just use SHA-256 instead and not bother with subtle details about which uses are safe and which are not.
- mr_mitm 3y agoStill depends. Using SHA-256 for password storage is bad. Argon2 would be a much safer bet. Or maybe scrypt or yescrypt.
- postalrat 3y agoAnd blindly use a suggestion from hn without understanding the tradeoffs.
- forward1 3y agoOr you can't, for example because you already signed a 20 year root with SHA-1. Nor does it matter in this example and many others.