I read that when salting passwords, it is advised to use a
h(pwd||salt) construction instead of
h(salt||pwd), the latter being vulnerable to a length extension attack.
What are possible scenarios in which being able to extend a salted password is useful for an attacker ?
I am aware that there are better ways of storing passwords than just salting them, though I would still like to know, supposedly in a case where only salted passwords are used, how being able to do length extension attacks is useful to an attacker.