Skip to main content
3 votes
Accepted

Is it secure to save a salt in session variables

Salt helps defend against attacks that use precomputed tables (source) You can store it in the session data ... but there is really no need to do so. It should be stored along side the hashed ...
CaffeineAddiction's user avatar
1 vote

Securely store password for API sessions

First, you never store any password, anywhere in plain text. The simplest thing would be to encrypt the password and then either send/retrieve it in the cookie or store it on the server. If I was ...
Rohit Gupta's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible