4 ms·
Why would you have to restrict the length at all? I could see something like a few thousand characters max, to avoid making it easy to strain the server, but ot
by PavlovsCat 13y ago
Why would you have to restrict the length at all? I could see something like a few thousand characters max, to avoid making it easy to strain the server, but other than that, you're not supposed to store it as is anyway, and if you hash it, the input length doesn't really matter... what am I missing?
- krapp 13y agoYou're missing the obvious - that such restrictions are a sign the site does probably store passwords in plaintext. Although maybe they aren't but they still want to make sure they meet some arbitrary standard of "randomness" to make it less "hackable."