fuzzyfox/mozhunt — Issue #14: Password salting
Author: Uruwolf
Created: 2012-01-20 11:48:28+00:00
State: open

Is it really a good idea to use the user name as the password salt?

I think it would be better to store and use the user's registration time (as a unix timestamp) and use that as the salt instead.