Hot answers tagged

2

The only time I've ever seen anything similar to this is in Dovecot (IMAP email server) where you can optionally configure it to log a hash of the password attempted for troubleshooting/debugging purposes. However, even with Dovecot (which is an implementation I would trust more than what yours appears to be), it is only something I would enable temporarily ...


2

I can't see any security claims to the application to store the clients inputs. Also, the "ciphertext" seems to be reversible (instead of a hash). It's a bad practice.


2

This is not secure at all, against any Form of possible attack. Regardless of what you are trying to achieve, this will not solve your problem. As the commenters already proposed, this is not only "security by obscurity" this might already be "obscurity" only.



Only top voted, non community-wiki answers of a minimum length are eligible