5 ms·
How are folks using light weight cloud resources approaching password hashing? The `10s of gigabytes of RAM` feels like an expensive requirement. Even lower mem
by thanksforfish 5y ago
How are folks using light weight cloud resources approaching password hashing? The `10s of gigabytes of RAM` feels like an expensive requirement. Even lower memory, high iteration count sha256 seems expensive for something like AWS Lambda where you're paying by the millisecond.
From the UX perspective there's also the issue that adding a second of latency during login or registration could increase user drop off.
How many sites really incur the higher costs and higher latency?
- forty 5y agoYou can offload some or all of the hashing to the client side. I heard this technic called "Server relief".