Website Security & Threat Management
A note about Kerckhoff's Principle

A note about Kerckhoff's Principle

6/19/2012 · John Graham-Cumming

What this post added

This post introduces and explains Kerckhoff's Principle, emphasizing that security systems should rely on the strength of their algorithms and the secrecy of keys, not on the obscurity of their design. It applies this principle to Cloudflare's password storage practices, highlighting the use of bcrypt and random salts as secure methods that do not require secrecy of the system's details.

Read the original post ↗