Stefan Fritsch Thu, 30 Jul 2009 01:52:34 -0700
Hi, given that crypt() hashes can nowadays be brute-forced on commodity hardware (especially since the password length is limited to 8 characters), wouldn't it make sense for htpasswd to use something stronger by default?
Cheers, Stefan