Hacker News new | ask | show | jobs
by osaariki 691 days ago
Edge's Password Monitor feature uses homomorphic encryption to match passwords against a database of leaks without revealing anything about those passwords: https://www.microsoft.com/en-us/research/blog/password-monit... So not the first, but definitely cool to see more adoption!
2 comments

This is nicer than the k-anonymity algorithm that Have I Been Pwned uses, but probably an order of magnitude more expensive to run.
I believe Safari does the same as well, so not even technically the first at Apple if I’m correct?
After reading the technical details... I'm really not sure tbh: https://support.apple.com/guide/security/password-monitoring...

I'm sure someone here understands that and can answer conclusively, but that's not me today.

No, the Apple article says that they're using the much faster and easier to implement k-anonymity strategy