Hacker News new | ask | show | jobs
by Musky 1093 days ago
This has also been noted by Assured AB when they did their security audit of the service [0].

> 3.4.1 Note Plaintext search queries in cache database

> Assured recommended hashing search terms before insertion / lookup in the cache database. Since search term cache lookups are only performed with exact matching, this should not affect functionality.

> Mullvad: We are now hashing (and salting) the search terms before they are added to Redis

[0] - https://mullvad.net/en/blog/2023/5/16/security-audit-of-our-...