News for hackers. Stuff that matters.

A comment on We're Baking ‘Have I Been Pwned’ into Firefox and 1Password.

Re:We're Baking ‘Have I Been Pwned’ into Firefox and 1Password by zeroisnowfour on Monday June 25, 2018 @10:27PM (#17397456)
A much more honorable way to do this would have been to allow the search of a hash of your email rather than your actual email.
[ Parent | on HN ]
Re:We're Baking ‘Have I Been Pwned’ into Firefox and 1Password by NoKnowledge on Monday June 25, 2018 @10:37PM (#17397491)
They do that, with the extra step of allowing k-anonimity (https://www.troyhunt.com/were-baking-have-i-been-pwned-into-...)
[ Parent | on HN ]
Re:We're Baking ‘Have I Been Pwned’ into Firefox and 1Password by rhencke on Monday June 25, 2018 @10:30PM (#17397465)
That's... exactly what they're doing?
[ Parent | on HN ]
Re:We're Baking ‘Have I Been Pwned’ into Firefox and 1Password by zeroisnowfour on Monday June 25, 2018 @10:38PM (#17397494)
Double-checking source code @ haveibeenpwned.com. I see no javascript that hashes your email address before submission.
[ Parent | on HN ]
Re:We're Baking ‘Have I Been Pwned’ into Firefox and 1Password by rhencke on Monday June 25, 2018 @10:42PM (#17397518)
Sure, but that's not what the linked article is discussing as the basis for integration with Firefox.
[ Parent | on HN ]
Re:We're Baking ‘Have I Been Pwned’ into Firefox and 1Password by snowwolf on Tuesday June 26, 2018 @02:50AM (#17398423)
Well the email k-anonymity is new that he added for this integration and Troy addresses why he’s not yet using it on HIBP in the article.
[ Parent | on HN ]