Is my developer’s home-brew password security right or wrong, and why?

A developer, let’s call him ‘Dave’, insists on using home-brew scripts for password security. See Dave’s proposal below.

His team spent months adopting an industry standard protocol using Bcrypt. The software and methods in that protocol… Continue reading Is my developer’s home-brew password security right or wrong, and why?