Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

First of all, this pattern is not exclusive to password hashes. There are lots of situation when handling customer data where you simply don't need the ability for the client to query the whole data-set, and if that's the case, allowing it is just bad hygiene.

Now if you make a good set of prepared statements as an interface for your database, this could be viewed as a "micro service" in it self.



Yes, and that's a good pattern. Just not for password hashes.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: