33 reputation
14
bio website
location
age
visits member for 1 year, 9 months
seen Feb 9 at 17:18

I am here to learn and learn until I become fit enough to teach.


Feb
5
awarded  Notable Question
Feb
3
awarded  Organizer
Feb
3
revised XSS : Blacklist characters vs. whitelist
Added OWASP as a tag
Feb
3
suggested suggested edit on XSS : Blacklist characters vs. whitelist
Dec
18
awarded  Supporter
Apr
28
awarded  Popular Question
Dec
14
awarded  Student
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Polynomial, first thank you very much for the very descriptive answer, as long as I store the secret key too secretive, HMAC should be better than CPU intensive operations with bcrypt/scrypt , that would make an online user wait until he logs in?
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Jacco - I am sorry, I have read through the question and the answers pointed out , but was not able to get an answer I required.
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@curiousguy - that is what I am trying to understand , as far as my knowledge goes, HMAC is little more secure than a hash , since it requires a key .
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Terry Chia - I have read somewhere and ve seen implementations that use HMAC for a password.
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Roy Alsop - Yes , brute force attack.
Jul
4
asked Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?