A follow-up to #723802: convert to sha-256 and hmac from md5 and sha1. We should consider adding to core the use or option to use even more robust (non-md5) hashing algorithm if available in PHP.

Comments

pwolanin’s picture

Title: Include an additional more secure password hashing algorithm to core » Use/include an additional evern more secure password hashing algorithm in core
pwolanin’s picture

Status: Active » Closed (fixed)
Freso’s picture

What, where, why, how was this fixed?