4 ms·
I think in that case he's referring to having a global salt instead of a unique salt for every password, in which case he's right. However, that's kind of a sil
by MertsA 12y ago
I think in that case he's referring to having a global salt instead of a unique salt for every password, in which case he's right. However, that's kind of a silly statement because the example web framework that he was using doesn't just have some global salt and nothing else.
- pstrateman 12y agoA global salt is not a salt. Term people are using for a secret is pepper. H(pepper | salt | password) type of thing.
- emmelaich 12y agoNice, but I'm also disappointed :-) My term is vinegar which is IMHO better!