2 ms·

Errr...most systems (like Django) send passwords in plaintext to the server! (Over SSL of course). The point of PBKDF-SHA256 is to protect the secrecy of passw

by phonon 7y ago

Errr...most systems (like Django) send passwords in plaintext to the server! (Over SSL of course). The point of PBKDF-SHA256 is to protect the secrecy of passwords if the server is compromised and its password hash db is dumped.

sneak 7y ago
Django’s auth system is for a single site. Bitwarden’s master passphrase protects the key that decrypts my password for every single site I use. This is not some random webapp. It is a password manager.
- phonon 7y ago
  So use a longer password with BitWarden. Think about it.