|
|
|
|
|
|
by 0x0
4443 days ago
|
|
|
Noticed the release notes mention a forced password reset for all users because of a hash change. Couldn't that be avoided by storing the hash type/version, and silently upgrade on the next successful login (when the password is available briefly in plaintext in the login request)? |
|
|