Join Kevin Skoglund for an in-depth discussion in this video Password encryption, part of Programming Foundations: Web Security.
- In this chapter we will discuss encryption…and user authentication.…It is worth dedication a chapter to this topic.…Authentication is had become ubiquitous on the web.…Many if not most websites have areas that require…username and a password.…It's important to discuss it…because it's very easy to get it wrong.…You could think that you've protected yourself…when in fact there's a huge hole in your security.…Let's begin by talking about password encryption.…First and foremost, never store passwords in plain text.…I already made this point before…but I can't stress it enough.…
This is the absolute minimum amount of security…that you must offer.…If you store passwords in plain text…you risk compromising users on your site…as well as users on other sites,…because users often use the same password…in multiple places.…So do it for yourself, do it for your users…and do it for other developers like me.…Never store passwords in plain text.…So if we're not storing in plain text,…how should we store them?…We should store them by encrypting them,…
This course is great for developers who want to secure their client's websites, and for anyone else who wants to learn more about web security.
- Why security matters
- What is a hacker?
- How to write a security policy
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
- SQL injection
- Session hijacking and fixation
- Passwords and encryption
- Secure credit card payments
Skill Level Beginner
1. Security Overview
2. General Security Principles
3. Filtering Input, Controlling Output
4. The Most Common Attacks
5. Encryption and User Authentication
6. Other Areas of Concern
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.