4 ms·
The logic here is that it doesn't reduce security by much, but it significantly reduces password resets. Facebook does it too (and more) which we talked about t
by pepve 10y ago
The logic here is that it doesn't reduce security by much, but it significantly reduces password resets. Facebook does it too (and more) which we talked about two months ago: https://news.ycombinator.com/item?id=13426544 https://news.ycombinator.com/item?id=13426544 . Some good points were brought up.
- foota 10y agoFrom that thread, facebook passwords are actually still case sensitive, but attempt to match the hash with the password case inverted.
- alanfalcon 10y agoFixing the cAPS lOCK problem seems far less egregious than throwing out all case information.