note 92035 added to function.hash

In response to Leigh's note on Aug 6th 2008: >Just a quick note about these benchmarks and how you should apply them. > >If you are hashing passwords etc for security, speed is not your friend. You should use the >slowest method. > >Slow to hash means slow to crack and will hopefully make generating things like rainbow tables >more trouble than it's worth. While I can see why someone would make this suggestion, it could cause load issues with a web application that experiences a high peak period during which a lot of users are logging in. I would suggest heavily load testing any changes made to authentication as well as including a note about scalability in the application documentation, just so it does not come back to bite you. ---- Server IP: 64.71.164.2 Probable Submitter: 24.13.11.25 ---- Manual Page -- http://www.php.net/manual/en/function.hash.php Edit -- https://master.php.net/note/edit/92035 Del: integrated -- https://master.php.net/note/delete/92035/integrated Del: useless -- https://master.php.net/note/delete/92035/useless Del: bad code -- https://master.php.net/note/delete/92035/bad+code Del: spam -- https://master.php.net/note/delete/92035/spam Del: non-english -- https://master.php.net/note/delete/92035/non-english Del: in docs -- https://master.php.net/note/delete/92035/in+docs Del: other reasons-- https://master.php.net/note/delete/92035 Reject -- https://master.php.net/note/reject/92035 Search -- https://master.php.net/manage/user-notes.php