3 ms·
You're right, I checked old emails. The 1000 character password issue was something different: we check new passwords against most common passwords (a long lis
by mtmail 6y ago
You're right, I checked old emails.
The 1000 character password issue was something different: we check new passwords against most common passwords (a long list) in the browser before submitting and checking long passwords frooze the browser. The algorihm tries too many substring matches.
- db48x 6y agoNice. There are lots of ways to speed that up, though. Use tries, or hash both your user's passwords and the list. (So that they're all the same length, and you never care about substring matches.)