3 ms·
This would be nice to know, because they're serving as a password-management app for all of your email passwords. Presumably, they would not store your Inky pa
by jtheory 14y ago
This would be nice to know, because they're serving as a password-management app for all of your email passwords.
Presumably, they would not store your Inky password as well -- instead, they'd store a secure hash, not MD5 or SHA-1, which are built for speed, not security....
- dmbaggett 14y agoIt's more complicated than that. Please see my comments on security elsewhere in the thread. We store a password verifier object -- that's akin to a secure hash, but our authentication model offers better guarantees about protection from man-in-the-middle attacks.