News for hackers. Stuff that matters.
Re:Notifying administrators about unhashed password storage by ReidZB on Tuesday May 21, 2019 @07:44PM (#19976292)
Perhaps you'd be interested in reading about Secure Remote Password (SRP): https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...

Copying the "layman's terms" from that page for your convenience...

In layman's terms, during SRP (or any other PAKE protocol) authentication, one party (the "client" or "user") demonstrates to another party (the "server") that they know the password, without sending the password itself nor any other information from which the password can be derived. The password never leaves the client and is unknown to the server.

Re:Notifying administrators about unhashed password storage by topmonk on Wednesday May 22, 2019 @06:02PM (#19986033)
Thanks, I thought there should be something like this.