4 ms·
Wait how do they implement case insensitive passwords? Do they to_lower() it on the client?
by vehementi 5y ago
Wait how do they implement case insensitive passwords? Do they to_lower() it on the client?
- thfuran 5y agoBy forcing you to type using an onscreen virtual keyboard.
- mason55 5y agoPossibilities 1. They store your plaintext password and then compare to_upper() of your stored password against what you enter on the virtual keyboard (which only supports uppercase letters). 2. They to_upper() your initial password, before they salt/hash, and test the salted hash against the salted hash of whatever you type on the virtual keyboard 3. Either one of the above but with an additional to_upper() on the password you enter at login so that if you do manage to type the password using your keyboard instead of the virtual keyboard it's still case insensitive.