[Y_Less]

Quote:

Originally Posted by Vince Some people take this way too far. I'm not saying that security isn't important but there is a limit. 32,000 rounds of hashing is severe overkill. I know for a fact that even large forums use a rather simple hashing algorithm. (FYI: I use a 160 bit salt and 3 rounds of hashing).

"Other people don't care so we shouldn't either" is not a good attitude to take towards security. In this case we have multiple discussions on the issues, people have no excuse not to know.