3 ms·
"Le sigh." This doesn't mean it was stored in plain text. There are plenty of 2-way encryption schemes.
by paulhauggis 12y ago
"Le sigh."
This doesn't mean it was stored in plain text. There are plenty of 2-way encryption schemes.
- yen223 12y agoUnless wordpress.com doesn't hold the keys for some really odd reason, it might as well have been plaintext.
- bengali3 12y ago"we noticed that we recorded the password you chose during signup for WordPress.com in plain text" agreed, the wording is 'recorded' not stored which makes me lean(naively?) towards something like inadvertent logging for example? ie. plaintext over https through a loadbalancer, with http communication internally, and an internal app logging all its traffic for debugging purposes? then sometime later: oops, we found some log files with plaintext passwords on our servers. IDK, just one scenario that might fall under this description