The comment conceded a needless hop for MD5 and SHA1. It is not needless: AccountSecurity.Configure refuses anything below SHA2 as the configured algorithm, so those only ever appear as a stored hash awaiting migration. That makes NeedsPasswordUpgrade true, so the job carries the upgrade hash and the microsecond digest is never the whole job. |
||
|---|---|---|
| .. | ||
| Security | ||
| Account.cs | ||
| Account.Migrations.cs | ||
| AccountComment.cs | ||
| AccountHandler.cs | ||
| Accounts.cs | ||
| AccountTag.cs | ||
| IPasswordProtection.cs | ||