Hacker News new | past | comments | ask | show | jobs | submit login

Yes, user-specific salt does raise the cost but given the usual length and complexity of passwords in-use IRL, raise is not massive enough for high security servers.

Besides, the point of my original comment was the problem of placing everything in the same basket which includes the code used to hash passwords and files. How would you protect them?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: