News for hackers. Stuff that matters.

A comment on Peppering (Password Storage).

Re:Peppering (Password Storage) by lawnchair_larry on Thursday July 02, 2020 @04:17AM (#23711071)
For those who don’t specialize in security, this is not an accepted practice. OWASP is a wiki that anyone with an idea can edit, and there are some bad ones on there.
[ Parent | on HN ]
Re:Peppering (Password Storage) by Jwarder on Thursday July 02, 2020 @11:46AM (#23714565)
What's wrong with it?

I don't specialize in security, but I've seen peppers/global-salts in most of the "serious" password storage schemes I've seen. Looks like an easy layer of protection to limit brute forcing hashes from data dumps.

[ Parent | on HN ]