开发者

Is built in ASP.NET Membership Hashing good enough?

I'm just wondering if the bui开发者_运维技巧lt in Hashing in the ASP.Net membership good password security, or if there is more that I should do to protect my passwords? If so, what should I look into for a higher level of security?


The hashing method with salt is pretty good. However how good the security is also depends a bit on how secure your application has to be.

Probably not good enough for securing bank accounts, hangar 18 projects or medical profiles. But yes good enough for your average company website or local sport club.


ASP.NET Membership uses standard .NET hashing algorithms from System.Security.Cryptography namespace. I thinks that's enough for many web solutions.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜