Code review comment for lp:~hazmat/pyjuju/security-specification

Revision history for this message
Gustavo Niemeyer (niemeyer) wrote :

200k+MD5 is a bit too much, but I agree that using HMAC (perhaps HMAC+SHA1) rather than plain MD5 would be good. HMAC is targeted at specifically this use case too.

« Back to merge proposal