3 ms·
I understood his post perfectly well. By using base64 to store passwords is just as bas as storing them in plain text, because you only rely on the good will of
by gecko_dude 15y ago
I understood his post perfectly well. By using base64 to store passwords is just as bas as storing them in plain text, because you only rely on the good will of the person who has access to them.
When dealing with security, this sort of practice should be avoided at all costs e.g. a sacrifice to the functionality of your product.
- cromulent 15y agoAre you suggesting that Twitter is going to give him your password, so that he might store it in plain text? I don't understand how that could happen. Twitter's OAuth implementation seems fairly sound.