4 ms·
That's how rails stores it in the database, so trying to be as transparent as possible.
by MattRogish 14y ago
That's how rails stores it in the database, so trying to be as transparent as possible.
- tptacek 14y agoIt takes 3 minutes to log into your application?
- MattRogish 14y agoYou are absolutely right. This is not our production app (ours is at 12 IIRC) but some internals app I've been playing with.
- tptacek 14y agoOk just so you know the default cost factor for bcrypt-ruby is a reasonable choice, and the cost factor you've used here is unreasonable.
- MattRogish 14y agoAbsolutely. Was trying (but failing) to make a joke.
- jgeorge 14y agoBCrypt 19s are <40s to encrypt here, using Java and not even native code. Certainly not outside the realm of usability for something you don't authenticate against all the time. I wouldn't want that for my screenlock password, but I can still see it being workable.