My coworker and I are having a fist-fight civilized discussion over password security. Please help us resolve our differences.
One of us takes the v
Every time I have anything to do with passwords they are one way hashed, with a changing salt i.e. hash(userId + clearPassword). I am most happy when no one at our company can access passwords in the clear.