4 ms·
In which case they're not hashing the password properly, they're likely checking the plaintext password as it's sent over HTTPS.
by Jabbles 14y ago
In which case they're not hashing the password properly, they're likely checking the plaintext password as it's sent over HTTPS.
- deleted 14y ago[deleted]
- podperson 14y agoThey do not need to transmit plaintext passwords, they merely need to pick when and how to salt each password carefully. What they can't do is randomly salt each stored password.