News for hackers. Stuff that matters.

A comment on Frequent reauth doesn't make you more secure. Parent comment

Re:Frequent reauth doesn't make you more secure by thih9 on Friday June 13, 2025 @08:17AM (#44267853)
It can be done server side too, the old password can be sent along the new one and the server can verify it.
[ Parent | on HN ]
Re:Frequent reauth doesn't make you more secure by dspillett on Tuesday June 17, 2025 @03:53AM (#44296688)
Yes, what I meant to say that it doesn't even have to be done server-side, so the fact it happens doesn't imply the server ever sees the old password beyond it's initial setting.
[ Parent | on HN ]