Comment Re:Who doesn't hash/encrypt passwords? (Score 1) 304
No. No. I'll say it again. No.
The purpose of the salt is to vastly increase the difficulty of pre-computing the password hashes.
If you use no salt -- an attacker who has your database can compare against precomputed hashes very, very easily.
If you use the same salt for everything -- an attacker only needs one precomputed set of hashes.
If you use a unique salt for every password -- an attacker has to have a separate set of hashes for every password he wishes to attack.
Yes, if your database is compromised you have a serious problem. But then, if you're database security is infallible, why bother to encrypt at all?
Defense in depth is key.