Reputation
1,139
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
8 22
Impact
~346k people reached

  • 0 posts edited
  • 2 helpful flags
  • 103 votes cast
Apr
27
awarded  Notable Question
Apr
8
accepted How does Mail.app handle account credentials?
Apr
8
comment How does Mail.app handle account credentials?
You are right about point two, I have slightly edited that point. Thanks for the answer, I'll upvote and wait for a bit to see if somebody else can add anything.
Apr
8
revised How does Mail.app handle account credentials?
added 15 characters in body
Apr
8
revised how is public key being exchanged in asymmetric cryptography?
edited body
Apr
8
answered how is public key being exchanged in asymmetric cryptography?
Apr
8
asked How does Mail.app handle account credentials?
Apr
4
awarded  Yearling
Oct
27
awarded  Popular Question
Oct
18
awarded  Popular Question
Oct
8
awarded  Notable Question
Sep
11
comment How long before a key is visible on a key server?
Then the web interface must be extremely unlucky, as it has never worked in retrieving keys for me :D Retrieval from GPG Keychain has always worked instead.
Aug
16
revised Website sent me my new password (after reset) in clear text
added 255 characters in body
Aug
16
comment Website sent me my new password (after reset) in clear text
@Craig also fair enough. I guess I have gone off topic one too many times back in school and that must have stuck with me :P
Aug
16
comment Website sent me my new password (after reset) in clear text
@Craig lol this is not a challenge. I was merely pointing out that explaining how to implement password resets properly or how to harden the process does not answer the question of whether receiving the password in plain text means that this password is also stored in plain text.
Aug
16
comment Website sent me my new password (after reset) in clear text
@Craig Ok, in this case nothing is stopping you from generating a password, sending it to the user and then hashing it and storing it in hashed form. In both cases, I think this should be addressed to the developers as there is no way we can answer it ourselves.
Aug
16
comment Website sent me my new password (after reset) in clear text
A bit off topic I think. The first paragraph does not add anything that was not included in the other answer, while the others (while informative) do not answer op's question and are not related.
Aug
16
comment Website sent me my new password (after reset) in clear text
@Craig You could still do that by fetching the password as it is being input and as it ends up in the $_POST array (or equivalent), before hashing it. So both things can be really, but this fact does not automatically imply that they are also storing the password in plain text.
Aug
16
revised Website sent me my new password (after reset) in clear text
deleted 34 characters in body
Aug
16
answered Website sent me my new password (after reset) in clear text