note 110100 added to faq.passwords

sha1 in conjunction with one or more salt values need not be as insecure as the above makes it out to be. e.g. the Fossil SCM creates an sha1 password hash based on a user's clear-text password combined with the user's name and a shared secret known only to the specific source repository for which the user is set up. ---- Server IP: 69.147.83.197 Probable Submitter: 193.28.196.242 ---- Manual Page -- http://www.php.net/manual/en/faq.passwords.php Edit -- https://master.php.net/note/edit/110100 Del: integrated -- https://master.php.net/note/delete/110100/integrated Del: useless -- https://master.php.net/note/delete/110100/useless Del: bad code -- https://master.php.net/note/delete/110100/bad+code Del: spam -- https://master.php.net/note/delete/110100/spam Del: non-english -- https://master.php.net/note/delete/110100/non-english Del: in docs -- https://master.php.net/note/delete/110100/in+docs Del: other reasons-- https://master.php.net/note/delete/110100 Reject -- https://master.php.net/note/reject/110100 Search -- https://master.php.net/manage/user-notes.php