Should websites be required to publicly disclose password storage strategies? (troyhunt.com)

No. I think we should keep the "required to" list as short as possible, in general.

He's right that this at least better than the "we use cookies" notice.