You'd want to have the secret last in the hash, otherwise you're open to hash ex...

		nwh on Aug 7, 2013 \| parent \| context \| favorite \| on: Security advisory: Breach and Django You'd want to have the secret last in the hash, otherwise you're open to hash extension attacks in some rare cases.