Rails 3.1 will secure passwords out of the box

github.com

10 pointsjagira2 comments

Thank you Gawker for bringing password security issue back into limelight.

agree. it's too bad that Django, out-of-the-box, is still using SHA1+salt. it'd be nice to see it switch to bcrypt or something similar.