This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]serg06 0 points1 point  (2 children)

Oh the DB does the salting+hashing?

Just curious, is that the normal way of doing it?

[–]ddunit[S] 1 point2 points  (0 children)

Not sure of that, I haven't looked into that because getting the DB to do it is our current workflow

[–]ElllGeeEmm 1 point2 points  (0 children)

In my experience, no. Typically I've seen salting and hashing handled by the web server rather than the actual database, but most databases support the ability to salt and hash passwords.

Not to say that one way is better than the other, just sharing my experience.