While we're at it, let's fix this:
Quote:
|
Passwords stored on third-party Graal-related websites or databases should be properly encrypted and obfuscated enough so that the hash cannot be decrypted.
|
Right idea, wrong word. Encryption and hashing are totally different ideas. Passwords should not be encrypted at all.
How about...
Quote:
|
Passwords stored on third-party Graal-related websites or databases should be hashed using cryptographically strong hash functions.
|