4 ms·
What happens then if you want/need to rotate your password? How does it deal with stupid password format restrictions?
by cauterized 10y ago
What happens then if you want/need to rotate your password?
How does it deal with stupid password format restrictions?
- RubyPinch 10y agothe salt gets changed so, either password database + master password gets stolen, or salt database + master password gets stolen
- jjnoakes 10y agoExcept if the master db is stolen without the master password, one can throw guessed passwords at it and know when one worked (i.e. the db becomes readable). Throwing passwords at a salt db gets you... what?
- cauterized 10y agoBut then if the salt is stored and the algorithm is known, doesn't the salt just essentially become the password, from a security standpoint?