Hacker News Reader

What about determining the salt from the domain for the given login? (perhaps slightly more refined than that to mitigate cases like *.google.com)

I think that's right. It would also need some ability to add mappings like "when I log in from gmail.com, hash like it is google.com"