6 ms·
Hashing password has nothing to do with sending email in plaintext. You can hash password and also email password in clear text at sign up, when you still have
by joesb 8y ago
Hashing password has nothing to do with sending email in plaintext.
You can hash password and also email password in clear text at sign up, when you still have access to the password.
And it doesn't even make sense to send hash of the password back in email.
- IshKebab 8y agoI wasn't talking about sending emails.
- mort96 8y agoBut... the conversation was about sending the password in emails.
- IshKebab 8y agoRead the comment I replied to. It explains that the passwords are not hashed at all. They are not sent in an email and then hashed. I was talking about the practice quoted in that comment of not hashing passwords. Edit: To be clear it doesn't say it explicitly, but it says that the cleartext password is sent periodically and the only way to do that is to not hash it.