Re: [whatwg] Hashing autofilled data (was Re: Proposal: Write-only submittable form-associated controls.)

[John Mellor]

On 16 October 2014 08:52, Mike West <mk...@google.com> wrote:

> * Server stores credentials as `sha512(password + username)`.
>

It might be better to require PBKDF2/bcrypt/scrypt.