Disclosing password hashing policies

Michal Špaček Michal Špaček cz Web Security, Performance & PHP development and consultancy

Video

Running a web app? Would you voluntarily share how your web app stores passwords? Some companies indeed do disclose, like Facebook, Twitter, and 1Password to name just a few. Some disclose involuntarily. Some don't share at all, because they don't care. They feel that it will make them more vulnerable. Here's why you should disclose and how.

Michal Špaček

Michal Špaček

Web Security, Performance & PHP development and consultancy

Michael develops web applications and has a particular interest in their security. His goal is to help Czech developers be the best when it comes to developing secure websites and applications.


web twitter linkedin github