>You can store plaintext passwords in logs because you don't know better. This whole conversation is about how it likely was not done on purpose, and that it w

>You can store plaintext passwords in logs because you don't know better. This whole conversation is about how it likely was not done on purpose, and that it was the result of logging HTTP requests and responses. If they wrote logger.info(password), yea I'd say that's as outrageous.