4 ms·
It doesn't matter that they know your salting tactic, it still stops reverse-lookup tables with common passwords online.
by Tyr42 14y ago
It doesn't matter that they know your salting tactic, it still stops reverse-lookup tables with common passwords online.
- Stefan_H 14y agoHowever any salting tactic that can be pushed and used on the client side would have a tough time using a salt that is on a per-user basis. This means that if you could salt it client side, you would need to have a static salt, which is significantly less secure than a unique salt per user.
- udp 14y ago> However any salting tactic that can be pushed and used on the client side would have a tough time using a salt that is on a per-user basis. How so? Surely the client would know their username too?