Skip to content

Comment on What I Did in 2011parent

Comments

You can do that, but it has the problem that until the user logs in, the password is in a dangerous form. If you bcrypt the salted SHA1ed form, though, you increase complexity slightly but get a complete conversion immediately.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.