note 109436 added to faq.passwords

are you kidding me? This entire write-up and all but the first comment are complete jokes. I would encourage the PHP community to do a serious check of how they go about explaining such security issues. A developer reading this would just assume they should use blowfish letting all of the other issues (salt for instance) go in one ear and out the other. And then you will have "clever" developers such as that of the previous comment that interpret computational intensity in the creation phase as a relevant measure and hence running a hash in loop/sequence. This is joke. You try to simplify an issue that should not be simplified. The result is misconceptions and almost guarantee of implementation problems. ---- Server IP: 69.147.83.197 Probable Submitter: 84.191.152.69 ---- Manual Page -- http://www.php.net/manual/en/faq.passwords.php Edit -- https://master.php.net/note/edit/109436 Del: integrated -- https://master.php.net/note/delete/109436/integrated Del: useless -- https://master.php.net/note/delete/109436/useless Del: bad code -- https://master.php.net/note/delete/109436/bad+code Del: spam -- https://master.php.net/note/delete/109436/spam Del: non-english -- https://master.php.net/note/delete/109436/non-english Del: in docs -- https://master.php.net/note/delete/109436/in+docs Del: other reasons-- https://master.php.net/note/delete/109436 Reject -- https://master.php.net/note/reject/109436 Search -- https://master.php.net/manage/user-notes.php