Storing password in tables and Digest authentication

后端 未结 1 1123
無奈伤痛
無奈伤痛 2020-12-16 20:18

The subject of how to store web site users passwords in tables has come up several times on SO and the general advice is to store a hash of the password, eventually an HMAC

相关标签:
1条回答
  • 2020-12-16 20:51

    The reason I am using pre-computed hashes is not protection against attacks, but to secure users privacy.

    Attacker can indeed authenticate, but he cannot (easily) see password of my precious users and compromise other services they are using etc.

    0 讨论(0)
提交回复
热议问题