4 ms·
Ask HN: How do you build a site with cleartext passwords these days?
I teach high school, and a number of the services we use store passwords in cleartext. I think some services do this because they think it's good for teachers to be able to tell students their passwords when they've forgotten them, and some do it out of poor technical practice.
I'm most familiar with Django, where you'd have to roll your own user management system to even implement cleartext passwords. I imagine most modern frameworks manage passwords better than storing them in cleartext.
My question is, how does someone build a website these days using cleartext passwords. What frameworks are people using where they end up using cleartext passwords?
- saghm 9y agoProbably not the answer you're looking for, but could you just build in a reset password functionality that you could manually trigger instead of telling users the passwords?
- gus_massa 9y ago[Horror story.] Last year I fill the registration form for a physics conference. I decide to use a silly easy throwaway password. After hitting submit, the confirmation page showed the password and a few minutes later I got an email with my password.