Comment on OP finds vulnerability where a forum sends you your password in plaintext over email and everyone misses the forest for the trees

<- View Parent
jormaig@programming.dev ⁨11⁩ ⁨months⁩ ago

But your password should never reach the server. It should be hashed already at the client and then salted at the server with a random hash. Then you store the salted hash

source
Sort:hotnewtop