3 ms·
In addition to per user salt, it would be good to also add "per application" salt. A random, long string, that is stored somewhere in the application code and n
by jpalomaki 13y ago
In addition to per user salt, it would be good to also add "per application" salt. A random, long string, that is stored somewhere in the application code and not in the database.
Obviously this does not help if the whole site is compromised, but it may help against SQL injection attacks where the attacker gains access to just data from database.