Hot answers tagged

3

If you use multiple password hashing algorithms independent of each other to process the same password, then passwords are protected only as well as the weakest algorithm protects them. PBKDF2 is easier to crack than Argon2. An attacker with only a few bytes of ciphertext can then bruteforce passwords, attacking just PBKDF2 and bypassing Argon2. If you ...


1

This original answer was to use HTTP/SSL/TLS to encrypt the information between the PHP server and NodeJS client and to use basic authentication in the HTTPS request. However from the conversation in the comments to this answer the server and clients are already using HTTPS to secure the traffic between the server and the client. Therefore as long as the ...


Only top voted, non community-wiki answers of a minimum length are eligible