Reputation
2,847
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
1 10 19
Newest
 passwords
Impact
~209k people reached

  • 0 posts edited
  • 0 helpful flags
  • 274 votes cast
1d
revised How to securely transfer password from a registration page to the database
edited body
Nov
14
revised Password manager's hash choices (scrypt + sha256)
Just to be more precise
Nov
13
revised Password manager's hash choices (scrypt + sha256)
added 108 characters in body
May
11
revised Store password using sha1
Added an example with cost factor
May
11
revised Store password using sha1
added 1 character in body
Dec
18
revised Is SSL more secure than encoding?
edited body
Sep
29
revised PBKDF2 used to generate an encryption key: long shared secret (password) vs iterations count
added 588 characters in body
Sep
28
revised PBKDF2 used to generate an encryption key: long shared secret (password) vs iterations count
edited body
Sep
25
revised Why don't sites implement a system where a wrong password causes a 3 second delay?
edited body
Aug
25
revised Should BCRYPT be used for client-side password hashing
added 338 characters in body
Apr
25
revised How to apply a pepper correctly to bcrypt?
Added note about using encryption instead of a pepper.
Mar
23
revised Why is it not standard practice to run password-based KDF's client-side?
Explained reason why a non-iterated hash can be used.
Mar
21
revised Why is it not standard practice to run password-based KDF's client-side?
deleted 43 characters in body
Mar
21
revised Why is it not standard practice to run password-based KDF's client-side?
added 19 characters in body
Dec
16
revised Can't brute force password cracking somehow be throttled?
Sorry, wrong word
Dec
16
revised Can't brute force password cracking somehow be throttled?
added 65 characters in body
Nov
12
revised Is it useful to protect hashed password with encryption?
added 117 characters in body
Nov
8
revised How secure is redirecting user from http://normal.bank.com to https://secure.bank.com?
added 20 characters in body
Sep
27
revised Secure authentication: partial client-side key stretching… please review/criticize my idea
deleted 5 characters in body
Sep
4
revised Do salts have to be random, or just unique and unknown?
To answer the updated question.