Re:Digital Identity Guidelines: Public Comment Period
by detaro on Monday March 13, 2017 @05:35AM
(#13856385)
That's exactly what the next line in the parent comment says.
Re:Digital Identity Guidelines: Public Comment Period
by iopq on Monday March 13, 2017 @05:53AM
(#13856456)
But it makes the whole comment pointless, how does it add to the suspicion?
Re:Digital Identity Guidelines: Public Comment Period
by mark-r on Monday March 13, 2017 @02:45PM
(#13860994)
Making a case-insensitive password checker is trivial if the passwords are being compared in plain text, but requires a bit of forethought if you do it with hashed passwords. In particular it's impossible to add this feature after the fact if you already have hashed mixed case passwords in your database. So the likelihood that passwords are unhashed goes way up.
or maybe they always to_lowercase all the passwords before hashing them