5 ms·
Would you write an app that stores important passwords in plaintext client side if your boss demanded it?
by billjings 10y ago
Would you write an app that stores important passwords in plaintext client side if your boss demanded it?
- OskarS 10y agoThis is a great question, and one that should be asked of any engineer. If you answer yes to this question, you should find another career. Engineers have ethical responsibilities as well.
- cdash 10y agoThe vast majority of developers are not engineers even if they like calling themselves Software Engineers.
- biafra 10y agoIt is actually quite common to only hash passwords server side. Not on the client. edit: Never mind. Parent was about storing not about sending passwords in clear text.
- ufmace 10y agoInterestingly, Chrome AFAIK did and still does this for stored website passwords. The team argued that anything but plaintext would be a more dangerous illusion of security, since Chrome itself needs to be able to retrieve that data at any time with no password.