safetyconcerns

2 ms·

1. 1.▲
   by safetyconcerns 10y ago

   Yeah it is a hash of the password, not the password. So you would check the hash in the signed link and compare to the stored one. But I agree, I don't like the feeling of it.
2. 2.▲
   Password reset links – random strings vs. signed tokens?

   1 points by safetyconcerns 10y ago|2 comments