Reputation
2,007
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
1 8 15
Newest
 Constituent
Impact
~180k people reached

  • 0 posts edited
  • 0 helpful flags
  • 257 votes cast
May
11
revised Store password using sha1
Added an example with cost factor
May
11
revised Store password using sha1
added 1 character in body
Dec
18
revised Is SSL more secure than encoding?
edited body
Sep
29
revised PBKDF2 used to generate an encryption key: long shared secret (password) vs iterations count
added 588 characters in body
Sep
28
revised PBKDF2 used to generate an encryption key: long shared secret (password) vs iterations count
edited body
Sep
25
revised Why don't sites implement a system where a wrong password causes a 3 second delay?
edited body
Aug
25
revised Should BCRYPT be used for client-side password hashing
added 338 characters in body
Apr
25
revised How to apply a pepper correctly to bcrypt?
Added note about using encryption instead of a pepper.
Mar
23
revised Why is it not standard practice to run password-based KDF's client-side?
Explained reason why a non-iterated hash can be used.
Mar
21
revised Why is it not standard practice to run password-based KDF's client-side?
deleted 43 characters in body
Mar
21
revised Why is it not standard practice to run password-based KDF's client-side?
added 19 characters in body
Dec
16
revised Can't brute force password cracking somehow be throttled?
Sorry, wrong word
Dec
16
revised Can't brute force password cracking somehow be throttled?
added 65 characters in body
Nov
12
revised Is it useful to protect hashed password with encryption?
added 117 characters in body
Nov
8
revised How secure is redirecting user from http://normal.bank.com to https://secure.bank.com?
added 20 characters in body
Sep
27
revised Secure authentication: partial client-side key stretching… please review/criticize my idea
deleted 5 characters in body
Sep
4
revised Do salts have to be random, or just unique and unknown?
To answer the updated question.
Sep
1
revised Do salts have to be random, or just unique and unknown?
deleted 107 characters in body
Sep
1
revised Do salts have to be random, or just unique and unknown?
added 5 characters in body
Sep
1
revised Do salts have to be random, or just unique and unknown?
Justification about salt thwarting brute-force attacks.