Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

  • Alien Nathan Edward
    cake
    link
    fedilink
    English
    8
    edit-2
    9 months ago

    how long have you been a web developer? Because I’ve been doing it for six years and almost every web app I’ve ever seen uses http with TLS to send the plaintext password to the backend, where it’s popped into a request var at the controller level, then passed as an instance var to the service level, salted, hashed and stored. This includes apps that have to submit themselves for HIPAA compliance because they deal with PHI.

      • Alien Nathan Edward
        cake
        link
        fedilink
        English
        89 months ago

        shit, I wonder why the protocol that’s much more well-adopted than yours does things differently

        • @Cabrio@lemmy.worldOP
          link
          fedilink
          English
          -12
          edit-2
          9 months ago

          Imagining thinking what’s popular is best. Betamax, HD DVD, Firewire, Ogg Vorbis, PNG, Firefox, Linux, Lemmy and friends, would all like a chat.