News for hackers. Stuff that matters.

A comment on Show HN: Base – API for authentication, email sending, images and more. Parent comment

Re:Show HN: Base – API for authentication, email sending, im... by Blackstone4 on Monday August 26, 2019 @02:22PM (#20802362)
When I login/signup to a website, I'm always sending my password in plaintext to the server (obv. encrypted via TLS). What's the difference?
[ Parent | on HN ]
Re:Show HN: Base – API for authentication, email sending, im... by FrancoisBosun on Monday August 26, 2019 @03:08PM (#20802734)
The difference is my customer's don't have a first-party relationship with the data store that holds their password.

    browser -> www.example.com

    browser -> www.example.com -> Base
That's the biggest problem I see with this approach. The password will be seen by two parties instead of just one.
[ Parent | on HN ]