My coworker and I are having a fist-fight civilized discussion over password security. Please help us resolve our differences.
One of us takes the v
I have had to move user accounts between sites (as might happen in a merger or acquisition) when the passwords were one-way hashed and it was not a problem. So I do not understand this argument.
Even if the two applications used different hashing algorithms, there will be a simple way to handle the situation.