• @Monument
    link
    English
    117 days ago

    That means those suckers are either stored plaintext or stored with decryption key that is somewhere within the server. Yeesh.

    • @Tja@programming.dev
      link
      fedilink
      96 days ago

      “if you change it”. It might send the email before storing it as a salted hash in the DB. Unlikely, but possible.