3 ms·
Why is it sending a password at all?, surely it should be at least a hash of the password
by mavhc 9y ago
Why is it sending a password at all?, surely it should be at least a hash of the password
- raverbashing 9y agoDo not send hashes. Do send challenge/responses. Hashes can be replayed. (Or send passwords over TLS)
- mavhc 9y agoSure, my question is more is there a history to this protocol? Is it from the 80s or something?
- jlgaddis 9y agoNo, it surely shouldn't.
- lawnchair_larry 9y agoIf that would work, it would mean the hash is actually the password.