On storing passwords

I just read this article on Computer World about not storing passwords.  The argument is that only the hash should be stored and that hash is compared to the one generated when the user enters their password.

http://www.computerworld.com/article/2853896/making-a-hash-of-passwords.html

Not sure what your pointing out. Most developers already know this(or should), and dolphin already does this. Has for many years.

So i'll take a guess that you considered the fact that the article seems to be written Dec 2, 2014 and think it's rather hilarious as i do that it still seems to allude people.

I have not worked directly with passwords in Dolphin; I know you have.  So you are telling me that we only store the hash in the database?  I thought Dolphin took the password at sign-up, or password change time, and applied the hash to it and stored the encrypted password in the database.  See, it is true that you learn something new all the time :-).

The post is still valuable because of the knowledge of how Dolphin handles passwords.

Dolphin stores a hash.

http://www.boonex.com/googlesearch/search?q=password+hash&gse_filter=googlesearch