5 ms·
Yeah I know - checking a new password is worse! Turns out he's downloaded a hashed list and is checking against that. Which is fine.
by tomglynch 7y ago
Yeah I know - checking a new password is worse!
Turns out he's downloaded a hashed list and is checking against that. Which is fine.
- stephenr 7y agoThe “regular” api works on a hash of the first handful of characters - in no scenario do you send the actual password to a remote service, so what is your concern?