On Wed, Jul 4, 2012 at 12:57 PM, <kushal.kumaran+python at gmail.com> wrote: > Well, if you waited until you had the password (however long) in a variable before you applied your maximum limits, the DoS ship has probably sailed already. Only because data transfer is usually more expensive than hashing. But I'd say that'll always be true. ChrisA