Re:Twitter urges users to change passwords after computer 'g...
by deepbreath on Thursday May 03, 2018 @09:10PM
(#16991437)
> meaning old hashes wouldn't be accepted and reducing hash "replay" possibilities
How would the server even verify the hash, then?
I'm imagining we have a system where a client signs, and timestamps, a hash that's sent meaning old hashes wouldn't be accepted and reducing hash "replay" possibilities ... but now I'm amateurishly trying to design a crypto scheme ... never a good idea.