@seism0saurus @unixtippse @nielsk
Credentials in plain text? I thought we got past that in the’90s.
Where is that documented?
Top-level
@seism0saurus @unixtippse @nielsk Credentials in plain text? I thought we got past that in the’90s. Where is that documented? 1 comment
|
@railmeat @unixtippse @nielsk
Otherwise they can't access your Mailservers.
I'm not sure if the data at rest is unencrypted but at least it is reversible since they need it for login to your mailservers.
It is definitely not a standard like bcrypt or scrypt there the credentials are secured by a one way function
https://www.heise.de/en/news/Microsoft-lays-hands-on-login-data-Beware-of-the-new-Outlook-9608798.html
@railmeat @unixtippse @nielsk
Otherwise they can't access your Mailservers.
I'm not sure if the data at rest is unencrypted but at least it is reversible since they need it for login to your mailservers.
It is definitely not a standard like bcrypt or scrypt there the credentials are secured by a one way function