|
|
|
|
|
by dllthomas
4867 days ago
|
|
That would not work, as stated. The search space is way too small. Simply exhaustively building a table mapping hash to IP address is tractable. This could be ameliorated by including a site-specific secret in the hashed value; I'm not comfortable calling that "secure" but it does address this particular flaw. |
|