3 ms·
I have heard of doing both, though I have not seen it yet in production. It gives the benefit of having to get the code and the database while also requiring di
by varikin 14y ago
I have heard of doing both, though I have not seen it yet in production. It gives the benefit of having to get the code and the database while also requiring dictionaries to be build per password.
- tedunangst 14y agoI think the considered opinion of "the people in the know" is that getting the code is just not that hard, and the global secret technique offers more illusory security than real security.