Support for new ASP.NET password storage practices

[thorsheim]

Who thought that "PBKDF2_SHA1(pw, salt, 1000, 256)" is a good idea?

The same people who thought LM Hash and NT Hash were a good idea.

I'm gonna have to give you both (Sc00bz & epixoip) a "like" for your comments there guys. :-)

But .. uhh. Troy? You know ASP.NET WAAAY better than I do. Can't you configure it to use other algorithms as well, with the above being the (new) default?