2 ms·
What is the attack vector this protects against though? If the authentication flow is doing anything other than salting/hashing the password and then throwing
by _heimdall 3y ago
What is the attack vector this protects against though?
If the authentication flow is doing anything other than salting/hashing the password and then throwing away the original plaintext password, the entire system really shouldn't be used at all.
- civilized 3y agoIt (partially) protects against the attack vector in which the system was badly coded and simply does not do what everyone with basic competency insists all systems must do. I strongly suspect that this is the most common attack vector in cybersecurity.