Re:Frequent reauth doesn't make you more secure
by eqvinox on Friday June 13, 2025 @10:54PM
(#44273888)
Technical/pedantic answer: you can store a 'normalized' hashed form of the password, e.g. before hashing it, convert it to all lowercase, replace all digits with 0, sort the characters, … and then do the same to the new password before hashing it, so a whole bunch of stuff will compare "equal".
Practical/actual answer: this is stupid either way.
Practical/actual answer: this is stupid either way.