Timeline for Why are only passwords hashed?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 30, 2016 at 18:10 | comment | added | paj28 | @spectras - I tend to avoid that claim. Hashes do stop DBAs in some circumstances, but a malicious sysadmin could modify the system to log plaintext passwords. | |
| Oct 30, 2016 at 13:02 | comment | added | spectras | Defence in depth is a key concept indeed. Also, you could mention hashing prevents legit users (such as DBA) from knowing the password. | |
| Oct 28, 2016 at 22:59 | history | answered | paj28 | CC BY-SA 3.0 |