Closed FroMage closed 10 years ago
Apparently SHA1 is laughable in case the DB gets hacked. We should use bcrypt I heard. Since bcrypt handles its own salt we can get rid of our salt column. There's a Java lib for that.
http://crackstation.net/hashing-security.htm has some useful info
Fixed!
I hope you didn't go adding any backdoors while you were at it
Who needs backdoors when the front door is wide open?
Apparently SHA1 is laughable in case the DB gets hacked. We should use bcrypt I heard. Since bcrypt handles its own salt we can get rid of our salt column. There's a Java lib for that.