3 ms·What's the fear? Aren't all passwords encrypted on the server side?by wapz 10y agoWhat's the fear? Aren't all passwords encrypted on the server side?pshc 10y agoBut if an in-transit plaintext password is leaked by CloudFlare, server-side encryption is irrelevant. (... that said, it's not like revoking sessions would impede a password-holding adversary...)amatriain 10y agoIt would for users that have 2FA enabled.