> Hash based challenge-response authentication does require the server to kn... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

netdog on Feb 4, 2011 | parent | context | favorite | on: Why Plenty Of Fish Stores Passwords in Plain Text

> Hash based challenge-response authentication does require the server to know the plain password.

Not true. Read up on HTTP Digest authentication. It's described in RFC2617.

jholman on Feb 5, 2011 [–]

Oh please. That's 12 years old, it can't possible still apply.

</troll>

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact