Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It requires the first party to the credential validation, for one thing. That means you have to have a separate account for every service, or expose your password for your shared account to those services.

AFAIK. YMMV.



You also have to store the plaintext password Somewhere. Same problem with DIGEST.


Where did you get this from? You know how passwords are matched right?


What? Why?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: