3 ms·
I don't interpret that as meaning any passwords were stored as plaintext. The act of logging in caused them to create a new password hash that included a salt,
by unreal37 14y ago
I don't interpret that as meaning any passwords were stored as plaintext. The act of logging in caused them to create a new password hash that included a salt, which was stored in the database (and presumably wiped out the old one.)
That all can be done without plaintext storage.
- mjschultz 14y agoRight, that's what my assumption is too but I didn't see anything in the post that says "recently logged in users" or "once you log in you'll be protected by the new scheme." Just "members whose passwords have not been compromised benefit [from the new scheme]".