A password sent over an encrypted connection and hashed+salted on the backend? I... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

Grue3 on March 4, 2019 | parent | context | favorite | on: W3C approves WebAuthn as the web standard for pass...

A password sent over an encrypted connection and hashed+salted on the backend? It's an extremely reliable and proven method that has been used for decades!

toyg on March 4, 2019 | [–]

Totally secure against data breaches and phishing, as we've seen over and over again.

Oh wait...

Accacin on March 4, 2019 | | [–]

It's not reliable because I have to trust the owner of the site.

mgiannopoulos on March 4, 2019 | [–]

You need to remember the password though. Quite more possible to forget the password than losing your mobile device.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact