3 ms·
And what 16 characters limit is trying to do?
by GoblinSlayer 5y ago
And what 16 characters limit is trying to do?
- inetknght 5y agoA hashed (and for correctness, salted) password will always have the same number of characters output from the hash whether the input password has one, ten, sixteen, hundred, or million characters. Character limits are a symptom that the company wants to store some form of the password that hasn't been correctly and securely hashed.
- handrous 5y agoThey can be a defense against DOS vectors, too. Though if that's the only reason, you can usually make the limit high enough that almost no actual person will ever hit it.