5 ms·
Ok for me, storing an encrypted password that is reversible is the same thing as storing a plaintext password. Means that people at least in their company can s
by dlikhten 15y ago
Ok for me, storing an encrypted password that is reversible is the same thing as storing a plaintext password. Means that people at least in their company can see my PW. Which means that if I used same PW as my email, they have it.
Lets take it a step further... If this is insecure, how much trust can you put that your data is secure? The goal of good online backups is that the only way to actually read data from the backup is to have the user's password. They clearly don't have that as everything is reversible.
Dropbox used to claim to be like that, not anymore. Which is why I don't trust dropbox with private data. Instead I store it using AeroFS with local replication.
- nodata 15y agoI don't think he meant that the password is stored in a reversible format. He meant that the e-mail is sent out before the password is encrypted and stored.
- mootothemax 15y agoThanks, this is exactly what I meant :)