3 ms·

I mean server-side (can we check the source for that?). The server could crack the hash, and the server could use various pieces of data (ip address, http heade

I mean server-side (can we check the source for that?). The server could crack the hash, and the server could use various pieces of data (ip address, http headers, etc) to try to figure out more about the password's owner.

jperras 14y ago
True, that's completely possible. However, if this concerns you then you should probably not sign up for any account on any site, since they could be doing the very same thing with your actual password.
- anthonyb 14y ago
  Which is why you use different passwords on different sites.