Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> I don't think anyone's nearly as concerned about case enforcement as they are about backend storage of passwords. I can assume ways of storing/verifying passwords that are case insensitive, but I'm not naive enough to assume they do.

Whilst I would hope they use a strong encryption scheme (with a variable work factor...), most of us know that even the biggest organisations in tech can fail miserably in this area.

But, I don't believe the majority of the forum posters see things the way we do. Many of them obviously correlate "case sensitivity" with "strong password", even though that's not exactly true.



And by encryption scheme, you really mean hashing scheme. Yup, it's easy to get confused.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: