4 ms·
> Some API requests include plaintext passwords (also fine and normal) Wait, no ? How is that fine and normal ? It doesn't seem fine and normal all.
by C4stor 8y ago
> Some API requests include plaintext passwords (also fine and normal)
Wait, no ? How is that fine and normal ? It doesn't seem fine and normal all.
- yogaboll 8y agoIt's completely standard. If you encrypt the password in the browser, potential hackers have access to the encryption code which makes it useless. Check the network tab in dev-tools when logging in to hn for example and you'll see your password in the request body :)