3 ms·
A much more honorable way to do this would have been to allow the search of a hash of your email rather than your actual email.
by zeroisnowfour 8y ago
A much more honorable way to do this would have been to allow the search of a hash of your email rather than your actual email.
- rhencke 8y agoThat's... exactly what they're doing?
- zeroisnowfour 8y agoDouble-checking source code @ haveibeenpwned.com. I see no javascript that hashes your email address before submission.
- NoKnowledge 8y agoThey do that, with the extra step of allowing k-anonimity (https://www.troyhunt.com/were-baking-have-i-been-pwned-into-firefox-and-1password/#enablinganonymoussearcheswithkanonymity https://www.troyhunt.com/were-baking-have-i-been-pwned-into-...)