News for hackers. Stuff that matters.

A comment on Gmail password first character is case insensitive on mobile device. Parent comment

Re:Gmail password first character is case insensitive on mob... by Mogzol on Saturday October 09, 2021 @05:33PM (#28813493)
Hashing on the client still seems redundant though. In the end, whatever value is sent to the server is essentially plaintext, because it's all an attacker needs to know to authenticate. Whether it's the raw text the user typed or some transformed version of it isn't really relevant.
[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by naniwaduni on Sunday October 10, 2021 @10:20PM (#28823957)
In a world where password reuse is rampant, whether it's the raw text the user typed or a hard-to-reverse transformation on it is absolutely relevant to the user, just not to the service provider.
[ Parent | on HN ]