3 ms·

> Thoughts? Honestly, I hate it. Why select a few chars of the hash instead of using something like hash(argon2(password) + domain) Anyway FIDO tokens and We

by NavinF 5y ago

> Thoughts? Honestly, I hate it. Why select a few chars of the hash instead of using something like hash(argon2(password) + domain) Anyway FIDO tokens and WebAuthn are the future. They do a better version of this in addition to eliminating phishing, replay attacks, etc.