3 ms·

if their scheme is secure, disclosure should not be an issue

• dchest 12y ago
  Another reply that doesn't answer my question. Q: Why do you need to know how they store passwords? A: It's not an issue for them to disclose it. What you gain by knowing their scheme? What you gain by knowing if it's secure or not?
  • SixSigma 12y ago
    In my country (UK), if it is not (reasonably) secure then they would be liable for prosecution. And yes, sorry, I was answering a different question to the one you asked.
    • dchest 12y ago
      All right, I see: 1) People asking this question are eBay shareholders who are interested to learn if the company they own will be prosecuted by UK government for storing passwords insecurely; the fact of which was discovered after the leak of 145 million user records. or 2) People asking this question are potential plaintiffs wanting to know if they should sue eBay for storing their password without hashing it with some hash function defined by law as secure.