Hacker News new | ask | show | jobs
by nmat 3414 days ago
>It implies that the system knows plaintext password

No it doesn't, the password can be generated client side. I know that client side code is not safe, but the purpose here is to protect people who are not tech savvy enough to figure that out.