Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So what's the best way to migrate a site that's using sha1 without salts to one that does use salts?

I expect it involves checking users' passwords two different ways (with salt, without) for the foreseeable future.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: