4 ms·
They could hash each combination. Probably reduces security, but not a dead giveaway.
by ghayes 10y ago
They could hash each combination. Probably reduces security, but not a dead giveaway.
- ryan-c 10y agoIt would effectively be a dead giveaway. Exhaustively searching all combinations of three characters takes trivial time even in an excruciatingly slow hash.
- tajen 10y agobut it prevents MitM spying.
- admax88q 10y agoHashing passwords is not done to prevent MitM, it's done to prevent/delay password disclosure if the database is hacked.
- whiteandnerdy 10y agoEntering partial passwords prevents MITM. OP was just explaining how partials could be implemented securely by hashing each combination; he wasn't saying hashing prevented MITM.
- stouset 10y agoSo does TLS, without the ridiculous downsides.
- reitoei 10y agoYep, I think this is what happens.