3 ms·
So really, you're using a primitive hash of the domain name, where the exact algorithm is a secret. Why not use a proper hash of the domain name plus a secret,
by nickzoic 15y ago
So really, you're using a primitive hash of the domain name, where the exact algorithm is a secret. Why not use a proper hash of the domain name plus a secret, like this does:
https://www.pwdhash.com/ https://www.pwdhash.com/
- Locke1689 15y agoI assume because you would have trouble with that if you didn't have the ability to generate the hash. In the case of pwdhash, what if you don't have the ability to install the extension?
- nickzoic 15y agoThat's a valid point, although I suspect the algorithm subscribed is just about complicated enough to tempt you to write down frequently used passwords anyway. You could carry around a little pwdhash implementation on a smartphone or whatever, I suppose, the algorithm isn't rocket science: http://crypto.stanford.edu/PwdHash/RemotePwdHash/hashed-password.js http://crypto.stanford.edu/PwdHash/RemotePwdHash/hashed-pass... It's a pity this sort of thing wasn't build into the input type="password" in the first place ... maybe HTML5 should introduce an input type="passhash" ...?