there used to be a airtable page where there are tested lists of packages that works with workers, d
there used to be a airtable page where there are tested lists of packages that works with workers, do any of you know the link? I can't find it!
CIt got removed because it was unmaintained. I use bycryptjs for passwords with my workers
ROh ok, thanks!
UI also use bcryptjs 
its easiest to get on workers but also interestingly there was some conversation on some laravel thing about how its better than argon2 but I dont know anything about passwords to know whats better really 
its easiest to get on workers but also interestingly there was some conversation on some laravel thing about how its better than argon2 but I dont know anything about passwords to know whats better really Uhttps://github.com/laravel/laravel/pull/6245#issuecomment-1730504804
To summarize, even some of the PHC judges acknowledge that, in order to achieve auth speeds in alignment with UX tolerance studies (500ms to 1 second of auth delay per user), both the Argon2 family and scrypt have to be tuned "downward" so much that they end up being less resistant to offline attack than bcrypt at equivalent auth speeds(!)
UIm aware of what owasp recommends and im sure the maintainers of laravel are aware also but it seems they have information from people who run phc that argon isnt better unless > 1 second runtime
UBut take that information how you want 
any of the options will be fine regardless
any of the options will be fine regardless
Uhttps://twitter.com/jmgosney/status/1508435966234611714 he still seems to argue bcrypt over argon in 2022
S@Petter That looks really interesting. A concern of mine is that bcrypt.js on workers would be too slow to have decent work factor. Did you do any performance testing with your Argon2 worker? (with the OWASP suggested config for Argon2id - interation count 2, memory 19Mib)
Cloudflare crypto has native support for PBKDF2, so I was considering that too (it's not the OWASP preference, but is mentioned as an alternative).
Cloudflare crypto has native support for PBKDF2, so I was considering that too (it's not the OWASP preference, but is mentioned as an alternative).
KPBKDF2 is currently limited to 100,000 iterations on Workers, fyi
UA like 12 or 13 cost bcrypt runs in 500ms and is plenty for the cost value
SArgh. Thanks for the info, that's a pretty good argument against PBKDF2 given OSWAP suggests 600,000+.
And thanks @Unsmart | Tech debt yes, 12 or 13 should be fine, and 500ms seems reasonable.
And thanks @Unsmart | Tech debt yes, 12 or 13 should be fine, and 500ms seems reasonable.
Swhat's the best way to use fetch with a proxy from a Worker?
Scan't find any proxy providers that support a dedicated IP with an API endpoint
Bis there any way to create folders in the dashboard where all workers and pages are listed so to group them by projects?
CUnfortunately not
Bis this something in the roadmap? I thought this is something that most people would want to use. or am I being biased? now when I heavily use cloudflare for many small projects I spent a lot of time finding my workers and pages.
TYou are one pages project and few API calls away from it
Dyou mean like a SOCKS-like proxy service that works with Workers?
Syeah through HTTPS endpoint that has dedicated IP support
S"that has dedicated IP support" this is the part I can't find
SI already have rotating proxies with HTTPS endpoints
Dwhat's the reasoning behind needing a dedicated IP from a third party? Why not use your own?
Smy own IP, from where?
Dthose work with Workers?
Sthere is a host that has completely blocked all incoming workers
Sand we have lots of users that use that host for an integration
Sand they won't work with us
Sof course because its a normal HTTPS call
Sno proxy config
Dhuh interesting, could you show an example fetch?
SDoh, that ,makes more sense lol. I was thinking it was a straight up standard HTTP proxy
Dwhy not spin up an instance on DigitalOcean or something? 
Dor is it a scaling problem too?
SI have a feeling that will be blocked already but yeah that is the next move if this doesn't work. this was supposed to be the easiest option but nobody offers it..
Smight just use rotating residential proxy should work
Din theory you could use outbound TCP sockets and connect to a "normal" HTTP or SOCKS proxy.
Lany idea why returning a 401 from a gRPC service would cause CF LB to return a 520? It doesn't return 520 if I made a http1 call to the same server w same response
UWhen troubleshooting most 5XX errors, the correct course of action is to first contact your hosting provider or site administrator to troubleshoot and …
LNone of these are relevant, its something up with gRPC handling
NDoes @cf/meta/llama-2-7b-chat-int8 in Workers AI have a token restriction that generates incomplete results
EA better channel is #workers-ai-beta
But yes, there are limits here: https://developers.cloudflare.com/workers-ai/platform/limits/
But yes, there are limits here: https://developers.cloudflare.com/workers-ai/platform/limits/
EAlso @ndy please try to avoid sending your question to multiple channels as this can cause confusion and duplicate efforts
CGRPC doesn't have 401s... what GRPC code are you returning?
what GRPC code are you returning?