Hacker News new | past | comments | ask | show | jobs | submit | deedasmi's comments login

Bonus points, store meta data about the hash algorithm. That way if you ever need to change it in the future due to a weakness in the algorithm you can validate the password against old metadata and rehash with new metadata and update the record.


Many of the popular password hashes include metadata in the default output already. bcrypt certainly does.


Argon2 as well. Most libraries give you a string that contains all the parameters it needs for hashing.


I’m the second of my name. Legally lastname II.

My airline tickets always print lastnameii


Don’t forget this is a largely one time cost vs Aurora, which scales cost with usage.

Also they said their current volume is around 13k/second. They’ve built the new platform for 30k/sec per node. This should last them a long time with minimal maintenance.


Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: