"is kind of like saying the operators should just leave all of your passwords in plaintext in the database because they could intercept them at log in anyway."

"is kind of like saying the operators should just leave all of your passwords in plaintext in the database because they could intercept them at log in anyway." Actually, as with encrypted email, the cryptography research community already knows how to solve that problem: https://en.wikipedia.org/wiki/Zero-knowledge_password_proof https://en.wikipedia.org/wiki/Zero-knowledge_password_proof