Is MD5 still considered safe for storing application user passwords?

From: Date: Wed, 31 Dec 2008 02:02:29 +0000
Subject: Is MD5 still considered safe for storing application user passwords?
Groups: php.general 
Request: Send a blank email to php-general+get-285261@lists.php.net to get a copy of this message
Hi All, I've been vaguely aware that more and more effort is going into proving that MD5 isn't secure anymore, but this article in particular - http://www.win.tue.nl/hashclash/rogue-ca/ - has me wondering if MD5 is still safe for storing hashed user passwords? I realise that article is talking about a very different use of an attack on MD5, but I'm curious if other developers are still using MD5, or if another hashing algorithm is considered better? Many thanks for any advice, M is for Murray http://www.ulblog.org

« previous php.general (#285261) next »