Comment by doodlesdev

Other than the low amount of default iterations (at least compared to the OWASP recommendation [0]) the article doesn't explain why the server-side hashing is "useless" and what the design flaw actually is. Am I missing something?

[0]: https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...