News for hackers. Stuff that matters.

A comment on Ask HN: Why is PayPal's password length limit still a thing?. Parent comment

Re:Ask HN: Why is PayPal's password length limit still a thing? by MichaelGG on Monday March 19, 2018 @05:20PM (#16623299)
So on a modern machine that might mean a user can submit a 1GB password?
[ Parent | on HN ]
Re:Ask HN: Why is PayPal's password length limit still a thing? by Klathmon on Monday March 19, 2018 @05:39PM (#16623476)
Your server should still have POST size limitations and other limits to prevent DoS.
[ Parent | on HN ]
Re:Ask HN: Why is PayPal's password length limit still a thing? by cdancette on Monday March 19, 2018 @06:16PM (#16623760)
I'm not sure relying on max POST size for password length is a good practice. It would be hell to debug without a good documentation.
[ Parent | on HN ]
Re:Ask HN: Why is PayPal's password length limit still a thing? by skookumchuck on Monday March 19, 2018 @06:30PM (#16623899)
> max POST size [...] hell to debug [...]

As I was saying :-)

[ Parent | on HN ]