3 ms·
Awesome idea, should randomly salt them for users who insist on using the same password for different sites.
by jawr 13y ago
Awesome idea, should randomly salt them for users who insist on using the same password for different sites.
- adamtulinius 13y ago"i created my account on machine x, now i can't log in from machine y".
- jawr 13y agoMight be an extreme comparison (beg your pardon if I'm being naive), but it's a similar hinderance to using SSH keys. Carry it around on a USB key, or deal with the security outweighing convenience.
- thatthatis 13y agoI like that. Could even be coupled with a portable browser.
- livnev 13y agoWhat about determining the salt from the domain for the given login? (perhaps slightly more refined than that to mitigate cases like *.google.com)
- thatthatis 13y agoI think that's right. It would also need some ability to add mappings like "when I log in from gmail.com, hash like it is google.com"
- thatthatis 13y agoThat being the obvious portability issue.