5 ms·

It's interesting, but it has issues that I think make it more worthwhile to just focus on not getting the tables dumped in the first place.

• ufo 12y ago
  What issues?
• Someone1234 12y ago
  If we followed that logic then why hash and or salt at all? Instead just "focus on not getting the table dumped in the first place."
  • protonfish 12y ago
    The greatest benefit to hashing is to protect the user's privacy from yourself (and other authorized administrators of the application) and as a guarantee that after the point hashing is implemented nobody can get easily expose plaintext version. Even if all of these fancy hashing algorithms are implemented, it only makes it slightly more difficult to crack weak (common, short, dictionary word) passwords.
    • Someone1234 12y ago
      If I'm an admin I could just dump the raw HTTP POST requests as they enter, bypassing hashing entirely.