Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: At what layer to hash a password Jun 26 2010 05:02PM
Javier Bassi (javierbassi gmail com)
If I'm not wrong, some forums like vBulletin when you login, they send
the password in md5 (using javascript). Thats better than sending it
in plain/text.  If you want double encrpytion, when the pass reach the
db, you could apply a salt to that md5
like md5("something_".$password);
On the negative ...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus