joedaltonwallas

2 ms·

1. 1.▲
   by joedaltonwallas 16y ago

   He talks about it as a nightmare wich implies that storing emails/hashes is worse. I think that storing them is not more difficult, it is more convenient and secure (of course this is relative). But maybe I am missing something about the se
2. 2.▲
   by joedaltonwallas 16y ago

   please correct me if I'm wrong: you are not storing passwords, you are storing hashes & salts. One different long random salt for each password. In my database I store hashes obtained with Blowfish: http://derekslager.com/blog/posts/20
3. 3.▲
   by joedaltonwallas 16y ago

   Why people are so frightend of storing the salt & hash of the user password? May be I am mistaken but if the salt is unique for each hash it is almost imposible to recover the original password. Of course you must use a well proven encr