Should websites be required to publicly disclose password storage strategies?troyhunt.com5 pointstroyhunt13 years ago