Hacker News new | ask | show | jobs
by dchest 1950 days ago
Right, the verifier can't be used to impersonate the user, but can be used to verify password guesses offline.