Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The points made here are covered in Coda Hale's post: http://codahale.com/how-to-safely-store-a-password/

While it recommends using bcrypt, if you augment that with "or scrypt or PBKDF2" the same principles apply.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: