Hacker News new | past | comments | ask | show | jobs | submit login

They could hash each combination. Probably reduces security, but not a dead giveaway.



It would effectively be a dead giveaway. Exhaustively searching all combinations of three characters takes trivial time even in an excruciatingly slow hash.


but it prevents MitM spying.


Hashing passwords is not done to prevent MitM, it's done to prevent/delay password disclosure if the database is hacked.


Entering partial passwords prevents MITM. OP was just explaining how partials could be implemented securely by hashing each combination; he wasn't saying hashing prevented MITM.


So does TLS, without the ridiculous downsides.


Yep, I think this is what happens.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: