Re:The Correct Way to Validate Email Addresses
by Xylakant on Thursday September 08, 2016 @06:25AM
(#12451721)
so you just replaced the password with another secret, the hashed password. An attacker would now not need to gain access to the original password, but needs the hashed password - which will be logged just like the PW.
The only security benefit is that it offers a bit of support for those that are reusing passwords since it doesn't expose the plain text.
The only security benefit is that it offers a bit of support for those that are reusing passwords since it doesn't expose the plain text.