From ea8580f9b702543e308e96103a6ab84144e34d5a Mon Sep 17 00:00:00 2001
From: Runxi Yu <me@runxiyu.org>
Date: Sun, 23 Mar 2025 18:32:56 +0800
Subject: README.md: SHA-256 isn't a good choice for this

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'README.md')

diff --git a/README.md b/README.md
index 48bc9d4..8717949 100644
--- a/README.md
+++ b/README.md
@@ -23,6 +23,8 @@ It may experience occasional outages.
   HTTP protocol.
 - Currently we round times to the nearest week for persistence, but this could
   cause issues if a user completes the challenge at the end of a rounded week.
+- SHA-256 is actually a pretty bad choice for proof-of-work. We should use
+  something like bcrypt or scrypt or argon2.
 
 ## Build
 
-- 
cgit v1.2.3