HN
Hacker News
Top
New
Best
Ask
Show
Jobs
Comment by daef | Hacker News Reader
Parent
Full thread
daef
·
Doesn't this imply the server knowing the plaintext password?
View on HN
a1369209993
·
Yes. You could (probably should) add a additional password=PBKDF(real_password) if that's a problem (eg because of password reuse), but it's not a essential feature from a cryptographic perspective.
Reply on news.ycombinator.com