I'm confused by their claim of hashing and THEN salting authentication codes. On...

		adam-f on Jan 19, 2014 \| parent \| context \| favorite \| on: Protect Yourself From The NSA With WireOver’s (YC ... I'm confused by their claim of hashing and THEN salting authentication codes. `On the server-side, we don't store the authentication code in plaintext. We hash it with PBKDF2 / SHA-256, salt it, then store it.`

It's a salted hash. That page is corrected, thanks.