I can think of a couple examples where hashing passwords directly contributes to leaking information recoverable by examining timing (e.g. enumerating django pr

I can think of a couple examples where hashing passwords directly contributes to leaking information recoverable by examining timing (e.g. enumerating django privilege status for a site's users). Edit: not to say that you should store your password plaintext. Hashing (well, properly using a KDF) isn't a panacea.