LukeBrandon / fluke

5 stars 0 forks source link

Password hashing implementation - Auth0, 2FA #27

Open FlynnOConnell opened 1 year ago

FlynnOConnell commented 1 year ago

See this stack-overflow answer (old, 2014).

Seems like more modern standard is hash/salt all passwords and only send via TLS.

Auth0 is free until we get popular..

Probably we just don't reinvent the cheese and do what these guys do.

2FA is annoying. If we get more than 5 users we probably should.