[Python-ideas] Add adaptive-load salt-mandatory hashing functions?

Guido van Rossum guido at python.org
Mon Jun 11 18:49:45 CEST 2012


On Mon, Jun 11, 2012 at 3:03 AM, Nick Coghlan <ncoghlan at gmail.com> wrote:
> However, password hashing is an important and common enough problem
> that it would be good to have some basic level of support in the
> standard library, with a clear migration path to a more feature
> complete approach like passlib.

I usually like this approach, but here I am hesitant, because of the
cost if the basic approach is found inadequate. The stdlib support
should either be state-of-the art or so poor that people are naturally
driven to a state-of-the art alternative on PyPI that is maintained
regularly. In this case I think our only option is the latter. I do
think it is another example of a situation where the stdlib docs ought
to contain some hints about where to go instead for this
functionality.

-- 
--Guido van Rossum (python.org/~guido)



More information about the Python-ideas mailing list