4 ms·
>This meant that not using Facebook and Google is a good thing in our scenario. That's why there's this idea of a 'username' paired with a stored salted hash o
by blueskin_ 13y ago
>This meant that not using Facebook and Google is a good thing in our scenario.
That's why there's this idea of a 'username' paired with a stored salted hash of a 'password'. This allows people to have independent accounts per service.
- e12e 13y agoThis is true. However, part of the thinking behind persona is that most sites will want to let you reset your password, so they store: salt+password:username:email. Some are being "clever" and use the email as the username -- hopefully paired with a numeric/uuid uid -- so that when you change email providers, you can retain your account. Some might store a phone number for recovery etc. Some require a working email in order to register (to fight spam accounts). Further, in general most sites will log your ip, be able to match that to your username, and so, unless you're using tor, be able to provide enough information to track you across sites anyway.