News for hackers. Stuff that matters.
Re:Digital Identity Guidelines: Public Comment Period by tripzilch on Saturday March 18, 2017 @04:39AM (#13900473)
If we talk about "hash the password before sending to the server" this procedure is what we're talking about (or something similar). Surely people aren't thinking of literally just hashing the password and sending it on its merry way? If we say "symmetric encryption" we don't mean we're going to do AES(block_n, key) either (ECB mode should never be used for anything).

There are no comments on this comment yet.