4 ms·

They don't all return the same amount though. According to my Chrome here and now: > https://api.pwnedpasswords.com/range/aaaaa https://api.pwnedpasswords.com/

They don't all return the same amount though. According to my Chrome here and now: > https://api.pwnedpasswords.com/range/aaaaa https://api.pwnedpasswords.com/range/aaaaa = 28.8KB > https://api.pwnedpasswords.com/range/01234 https://api.pwnedpasswords.com/range/01234 = 28.5KB > https://api.pwnedpasswords.com/range/af0fa https://api.pwnedpasswords.com/range/af0fa = 23.2KB

voltagex_ 9y ago
Isn't Chrome seeing the decrypted and decompressed response in DevTools? I'd be more interested in what you see in Wireshark.
- moviuro 9y ago
  Sadly not available on my current machine :( The experiment is left as an exercise to the reader :)