3 ms·
When I login/signup to a website, I'm always sending my password in plaintext to the server (obv. encrypted via TLS). What's the difference?
by Blackstone4 7y ago
When I login/signup to a website, I'm always sending my password in plaintext to the server (obv. encrypted via TLS). What's the difference?
- FrancoisBosun 7y agoThe difference is my customer's don't have a first-party relationship with the data store that holds their password. browser -> www.example.com browser -> www.example.com -> Base That's the biggest problem I see with this approach. The password will be seen by two parties instead of just one.