Skip to main content
replaced http://stackoverflow.com/ with https://stackoverflow.com/
Source Link

It looks to me like the old tag wikithe old tag wiki was intended to be about password-manager use-cases.

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.

If the questions using the tag were about how to make auth tokens from passwords, or implement password authentication, then the questions were mis-tagged according to my reading of the text introduce by Rev4 (Jan 2013), live until Rev6 (Feb 2016). Perhaps a password-authentication tag is needed, or those questions should have use tagged with or . The seems to be about implementing systems that use passwords for authentication, and recommends hashing.


It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.


Whatever the password-encryption tag is repurposed to, it should have a sentence to point people in the right direction if they wind up reading that tag wiki when they actually need password hashing.

It looks to me like the old tag wiki was intended to be about password-manager use-cases.

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.

If the questions using the tag were about how to make auth tokens from passwords, or implement password authentication, then the questions were mis-tagged according to my reading of the text introduce by Rev4 (Jan 2013), live until Rev6 (Feb 2016). Perhaps a password-authentication tag is needed, or those questions should have use tagged with or . The seems to be about implementing systems that use passwords for authentication, and recommends hashing.


It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.


Whatever the password-encryption tag is repurposed to, it should have a sentence to point people in the right direction if they wind up reading that tag wiki when they actually need password hashing.

It looks to me like the old tag wiki was intended to be about password-manager use-cases.

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.

If the questions using the tag were about how to make auth tokens from passwords, or implement password authentication, then the questions were mis-tagged according to my reading of the text introduce by Rev4 (Jan 2013), live until Rev6 (Feb 2016). Perhaps a password-authentication tag is needed, or those questions should have use tagged with or . The seems to be about implementing systems that use passwords for authentication, and recommends hashing.


It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.


Whatever the password-encryption tag is repurposed to, it should have a sentence to point people in the right direction if they wind up reading that tag wiki when they actually need password hashing.

added 712 characters in body
Source Link
Peter Cordes
  • 360.4k
  • 1
  • 45
  • 74

It looks to me like the old tag wiki was intended to be about password-manager use-cases.

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.

If the questions using the tag were about how to make auth tokens from passwords, or implement password authentication, then the questions were mis-tagged according to my reading of the text introduce by Rev4 (Jan 2013), live until Rev6 (Feb 2016). Perhaps a password-authentication tag is needed, or those questions should have use tagged with or . The seems to be about implementing systems that use passwords for authentication, and recommends hashing.


It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.


Whatever the password-encryption tag is repurposed to, it should have a sentence to point people in the right direction if they wind up reading that tag wiki when they actually need password hashing.

It looks to me like the old tag wiki was intended to be about password-manager use-cases.

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.


It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.

It looks to me like the old tag wiki was intended to be about password-manager use-cases.

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.

If the questions using the tag were about how to make auth tokens from passwords, or implement password authentication, then the questions were mis-tagged according to my reading of the text introduce by Rev4 (Jan 2013), live until Rev6 (Feb 2016). Perhaps a password-authentication tag is needed, or those questions should have use tagged with or . The seems to be about implementing systems that use passwords for authentication, and recommends hashing.


It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.


Whatever the password-encryption tag is repurposed to, it should have a sentence to point people in the right direction if they wind up reading that tag wiki when they actually need password hashing.

added 374 characters in body
Source Link
Peter Cordes
  • 360.4k
  • 1
  • 45
  • 74

It looks to me like the old tag wiki was intended to be about password-manager use-cases. Does

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.

 

It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.

It looks to me like the old tag wiki was intended to be about password-manager use-cases. Does that need its own tag?

It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.

It looks to me like the old tag wiki was intended to be about password-manager use-cases.

[old entry] Password encryption is the act of securing a password with another password.

Does that need its own tag?

I disagree with the claim in this question that the tag says to "encrypt by hashing". It actually says/said (in the next sentence) that hashing is what you should do instead of encrypting, if that's what you came looking for, and that the tag isn't about that.

 

It also had a link to an article about why encrypting a password doesn't create a good auth token without pointing out that this was a different usage of the phrase.

If that was the intended use of the tag, then I think it needed to change. security.SE might want tags for specific security errors, even uncommon ones that, but I don't think SO needs a tag for every bad practice. There are too many pitfalls in software design to label every one with a tag.

Source Link
Peter Cordes
  • 360.4k
  • 1
  • 45
  • 74
Loading