who uses what for encrypting passwords any more?

who uses what for encrypting passwords any more?

am 19.12.2007 21:15:56 von geekprogrammer.ed

Is there some standard one follows for encrypting one's user's
information? I would think that failing to do so could result in
liability issues for not taking "standard precautions" against
identity theft... so what standards are there out there?

Thanks in advance for your helpful comments

Re: who uses what for encrypting passwords any more?

am 20.12.2007 10:44:49 von colin.mckinnon

On 19 Dec, 20:15, "soldier.coder"
wrote:
> Is there some standard one follows for encrypting one's user's
> information? I would think that failing to do so could result in
> liability issues for not taking "standard precautions" against
> identity theft... so what standards are there out there?
>
> Thanks in advance for your helpful comments

There's lots of standards - crypt, md5, 3DES. And there's been lots of
discussions about how best to implement these in PHP - see
http://groups.google.co.uk/groups/search?hl=en&q=php+passwor d+hash&qt_s=Search+Groups
for more info.

C.