
6/19/2012 · John Graham-Cumming
What this post added
This post introduces and explains Kerckhoff's Principle, emphasizing that security systems should rely on the strength of their algorithms and the secrecy of keys, not on the obscurity of their design. It applies this principle to Cloudflare's password storage practices, highlighting the use of bcrypt and random salts as secure methods that do not require secrecy of the system's details.