4 ms·
No it doesn't. You need to know the email address up front in order to generate the hash.
by driverdan 13y ago
No it doesn't. You need to know the email address up front in order to generate the hash.
- lambda 13y agoBut the point is that you can easily brute force that, especially if you have a list of people that you suspect may be making such comments and their email addresses. Saying that your email is kept private by taking its MD5 sum is like expecting than an unsalted MD5 sum for a password hash in a publicly accessible password database will be secure for people with weak, brute-forcible passwords like "1234". You are providing a little bit of obfuscation, but no real security.
- deleted 13y ago[deleted]