2 ms·
Let's say that this problem occurred because they logged the body of post requests (including the passwords). Could this problem be mitigated by hashing the pa
by duchenne 8y ago
Let's say that this problem occurred because they logged the body of post requests (including the passwords).
Could this problem be mitigated by hashing the password on the front-end (and a second time on the back-end)?
Like this, the server would never see the plain text password.
Also, if a facebook employee intercepts the hashed password, he could only use it to login to a facebook account. But, I guess he could do that anyway if he has access to the db.
However, this employee would have no way to know the real password and use it on another website.