News for hackers. Stuff that matters.
Re:Using HTTP Basic Auth in 2022 by axiosgunnar on Saturday January 01, 2022 @03:35PM (#29762437)
Your suggestion is vulnerable to the https://en.m.wikipedia.org/wiki/Pass_the_hash attack.

Your suggestion is basically going back to the days where databases stored plaintext passwords in the database, just that the plaintext happens to be a hash.

There are no comments on this comment yet.