3 ms·
> The only problem is that you force legitimate users to wait as well. I think that's what he meant when he said "realistically". In the reply I posted the quo
by itistoday2 12y ago
> The only problem is that you force legitimate users to wait as well.
I think that's what he meant when he said "realistically". In the reply I posted the quoted text points out that for busy auth servers, it increases potential for DoS.
- tptacek 12y agoZzz. This is a trope. Many of the largest app providers in the world use adaptive hashes to store passwords. All of them are DoS targets.