4 ms·
But if an in-transit plaintext password is leaked by CloudFlare, server-side encryption is irrelevant. (... that said, it's not like revoking sessions would im
by pshc 10y ago
But if an in-transit plaintext password is leaked by CloudFlare, server-side encryption is irrelevant.
(... that said, it's not like revoking sessions would impede a password-holding adversary...)
- amatriain 10y agoIt would for users that have 2FA enabled.