note 112495 deleted from function.password-hash by sobak
| From: | sobak@php.net | Date: | Thu, 01 Dec 2016 05:45:24 +0000 |
| Subject: | note 112495 deleted from function.password-hash by sobak | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-207779@lists.php.net to get a copy of this message | ||
Note Submitter: chris at acsdi dot com
----
Alan is entirely wrong, please ignore his comment and/or vote it down. This method encodes the
algorithm and other parameters into the returned hash.
Deliberately specifying the algorithm to use should only be done in a carefully considered scenario,
and these functions are designed and policies have been decided to ensure wide compatibility.
The risk of forcing a particular algorithm is that your code will continue to use a weaker algorithm
as newer ones are implemented and strengthened.