A web application requires users to log in with their email address and a password. For security reasons, the application stores SHA-1 hashes rather than plaintext passwords. It also computes the hash for a combination of the password and some random salt, rather than the password alone.
Describe two simple improvements that should be made to this authentication scheme.
Comments
Leave a comment