3 ms·
can we please stop having this conversation every time a plain text password is mentioned, its a bad idea to have a recoverable password, in any form, the end.
by throwaway64 15y ago
can we please stop having this conversation every time a plain text password is mentioned, its a bad idea to have a recoverable password, in any form, the end.
http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/
- Confusion 15y agoIt's not helping that you give the wrong explanation. The issue here isn't that the password is recoverable, because you don't know whether that is true. It may as well be properly bcrypted. The problem is that they sent you the plaintext password you just entered via email.
- Dylan16807 15y agoCan we please have people stop assuming that the password is recoverable just because it's put in an email when it's set.