Re:An HN style social news site written in Ruby/Sinatra/Redi...
by antirez on Thursday October 20, 2011 @07:31PM
(#3137621)
daeken thanks for your knowledge. We should follow your example of understanding how things works instead of repeating "use bcrypt".
[ Parent
| on HN ]
Re:An HN style social news site written in Ruby/Sinatra/Redi...
by tptacek on Friday October 21, 2011 @12:58AM
(#3138495)
I agree, but we could do worse than to have "bcrypt" be the lay developer's default answer. All that is is annoying, whereas "secret salt construction using Whirlpool as the hash" or- whatever- craziness is actually dangerous.
Your code is neat. I don't care what hash you use. I'm just saying.
Re:An HN style social news site written in Ruby/Sinatra/Redi...
by michaelfairley on Thursday October 20, 2011 @08:33PM
(#3137774)
If iterated SHA1 and bcrypt are (all other things equal) equally secure, but you're more likely to mess up while implementing your own iterated SHA1, then bcrypt is more secure.