Re: [DRAFT RFC] Adding Simplified Password Hashing API
| From: | Pierre Joye | Date: | Tue, 03 Jul 2012 08:42:32 +0000 |
| Subject: | Re: [DRAFT RFC] Adding Simplified Password Hashing API | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-61077@lists.php.net to get a copy of this message | ||
hi!
On Tue, Jul 3, 2012 at 1:23 AM, Anthony Ferrara <ircmaxell@gmail.com> wrote:
> Well, if not for an ini parameter, what way would you suggest to alter
> the default bcrypt cost? (seriously, I'm open to suggestions)...
Simply by not allowing to change it. If one does not like it, it can
pass the option value as he wishes.
An ini setting for that sounds wrong to me.
Cheers,
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org