note 80967 deleted from function.md5 by nlopess
| From: | nlopess@php.net | Date: | Fri, 08 Feb 2008 16:23:16 +0000 |
| Subject: | note 80967 deleted from function.md5 by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-135914@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
Ok let's say I use md5 or sha1 encoding in my website but when I built it I didn't know
about the use of salt to make it more secure.
If someone's password gets stolen, is it my fault? I mean, am I responsible.
Obviously my site contains no sensitive personal data, but say they use the stolen password + email
combo to hack into the person's Hotmail account?
What are the legal boundaries here?