Hacker News new | past | comments | ask | show | jobs | submit login

It is a mystery to me how you would design a web application that required bcrypt on every page reference. For session-based browser apps, you use a cookie (properly secured) to note the session.

For applications requiring basic auth, you could cache the username/password combination after the first login.

For bcrypt to be a killer on modern systems, you are botching something in your authentication system.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: