2776
General Discussion / Re: Glass Hosting Development
« on: August 30, 2016, 12:44:18 PM »blockland creates an expected hash from the username (if it exists), and the password sha1 hash (which i don't trust. at all. i'd rather use an external script to do all of this over sha256)why don't you trust sha1? As long as you have a secure password it's fine, and you could use something along the lines of an iterated hash function to slow it down and help prevent bruteforce attacks against the hash (Which should never even be a problem assuming security is fine and you can't *get* the hash)