Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes I meant sending the password cleartext inside the transport protocol*

pre-hashing doesn't prevent an attacker from stealing your account if it can read the communication, but it prevents it from having your password and using it everywhere else where you might re-use the password or a permutation of it



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: