3 ms·

This requirement is technically fulfilled by encrypting transmissions with TLS and storage with disk encryption like LUKS or Veracrypt. It does not really say a

This requirement is technically fulfilled by encrypting transmissions with TLS and storage with disk encryption like LUKS or Veracrypt. It does not really say anything about password hashing.

tyingq 8y ago
The screenshot shows that the plaintext password was sent over SMTP. So it isn't meeting that bar either.
- bausshf 8y ago
  What makes you think it's SMTP and not SMTPS?
  - tyingq 8y ago
    Because you can't force the endpoints of your customers to all support that.