Hacker News new | past | comments | ask | show | jobs | submit login

Because you are technically supposed to use $2y$ which ensures you are not using the broken implementation that was fixed in 2011. Of course if you are using a newer php installation $2a$ will be identical to $2y$ so it's just a disambiguation, just as $2x$ is used to identify hashes generated using the broken implementation.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: