To be fair, there are a class of problems you solve by storing your passwords behind a simple one-way function instead of as plaintext. I was asked earlier thi

To be fair, there are a class of problems you solve by storing your passwords behind a simple one-way function instead of as plaintext. I was asked earlier this week to audit a system that made the old passwords available to the user on their profile page. Using md5(), for all its shortcomings everyone has mentioned here, would at least make this architecture mistake impossible.