4 ms·
At this point, I just automatically assume any website that has a maximum character limit and weird character restrictions is storing the password in plaintext
by trinovantes 5y ago
At this point, I just automatically assume any website that has a maximum character limit and weird character restrictions is storing the password in plaintext
- jaywalk 5y agoSometimes the character restrictions are due to overly aggressive web application firewalls.
- tdumitrescu 5y agoSetting a reasonable limit closes off a potential DoS vector. That's why our security team had us add a limit. (Sure, in practice rate limiting should also be in place, defense in depth.)