3 ms·
Um...you're missing the point. It's fine to truncate the password (though ideally you don't do it at a super short length). The issue you are replying to is r
by lostcolony 6y ago
Um...you're missing the point.
It's fine to truncate the password (though ideally you don't do it at a super short length).
The issue you are replying to is referring to when a site doesn't do it for both account creation and login. Which is a bug. A stupid, hard to detect, hard to explain, likely never to be fixed, bug. That only affects people trying to be secure.
- infogulch 6y agoI get that different parts of a service truncating the password to different lengths is a problem, and that it's a different (perhaps worse) problem than the one that causes site operators to limit password lengths.