Go through your text, and everywhere where it says "password" change it to say "passphrase."
The password-setting step, where you have the user initialize their password, should also say "don't re-use the same passphrase that you use somewhere else." Just say it. (If users want to ignore it, fine. You can't help people who don't want to be helped.)
This doesn't fix all the problems, but it fixes the most, in the smallest amount of time/effort. One of your interns can do all this in a single morning.
After that, make sure you're hashing, but use something already invented for this job rather than trying to figure it out yourself. (This might not be a job for an intern, though I bet it could, at some places.)
Congratulations, your site is now better than the other 99.9%. We'll revisit and update these decisions in a century or two, when you're considered to be better than only about 90%.
You got a temporary offer. They will jack the prices back up to the previous level after some period of months.
Yeah, two years. I forgot to mention that. Typically, though, when Comcast gives a "temporary" deal like that in two years time that'll be standard pricing for that service level. That's the way it's always been. I just hope that I can ditch the cable box in two years.
It's obvious that tv isn't a big deal now since the local channels are coming in at 720p. They might be doing hbo/showtime at 1080p, no idea. But netflix and a-prime are better to look at.
If you trust the alternative root, then it can't forge the entire tree, because it's not forging anything at all. It's protecting you from forgery. (And also, it won't be an alternative root, either; it'll just be the root.)
I went 100% data something like 10 years ago. Then Comcast called me up and said "hey, we'll throw in basic cable for $5/month more", so I said "fine" and took it. We didn't watch much - the kids watched Disney Channel when they were much younger but that was about it.
Then I moved and went back to a data-only plan, which went from $50/month to $70/month for some reason, I think because it got faster.
Anyway, fast forward two years and last month Comcast called me up and said "hey, for another penny each month we'll throw in basic cable plus a premium channel *and* take you up to 300Mb/sec". I said "Sounds good, I don't need the cable". Long story short, they literally wouldn't upgrade my cable speed until I'd connected the stupid cable box to my tv and turned it on.
The only good to come of it (besides the ass-kicking speed) is that when it started crapping they sent a tech out who finally figured out what I'd been telling them for two years - there's a problem in the wiring between my house and their office.
Anyway, the point is that they would not increase my speed without forcing me to get cable. At least I'll be able to get netflix on the comcast box thing soon, although I also need amazon prime and youtube to get even close to replacing a roku.
He who has but four and spends five has no need for a wallet.