Re: Use SHA-2 by default instead of MD5 for password encrypting

2010-12-29 Thread Ilya Kaliman
Sorry, but you didn't. It was just a reference for those who need strong password security. I am perfectly fine with MD5 or SHA*. We may just add a note to the book for people who need stronger security. Best, Ilya. On Wed, Dec 29, 2010 at 6:28 PM, William Immendorf wrote: > On Wed, Dec 29, 2010

Re: Use SHA-2 by default instead of MD5 for password encrypting

2010-12-29 Thread William Immendorf
On Wed, Dec 29, 2010 at 12:58 AM, Ilya Kaliman wrote: > By the way here is a nice article about why general purpose hash > functions are bad for hashing passwords: > > http://codahale.com/how-to-safely-store-a-password/ I get the idea: You want use to use Blowfish for encrypting our passwords. How