Security News > 2015 > October > CBcrypt: Never expose passwords or encryption keys to servers (Reddit)