3 ms·
Every step you take to improve security has costs associated with it. At some point, you just have to say "this is secure enough for all reasonable purposes," b
by aqme28 14y ago
Every step you take to improve security has costs associated with it. At some point, you just have to say "this is secure enough for all reasonable purposes," because to do otherwise is to risk getting bogged down.
Hashing + salting passwords in storage and using HTTPS is better than a shocking number of large-scale sites. I fail to see a problem.
- theonewolf 14y agoThe problem is that HTTPS isn't in place today. And people are signing up with passwords being sent plaintext. I just wanted a warning out there---if you want to use the site today, please don't use a password that matters to you.