Comment

Comment by throwawayReply

1. A fingerprint is something you cannot change, cannot revoke if leaked and cannot be unique across different sites.

2. A fingerprint hash isn't a cryptographic hash because you need to be able to match to nearby matches. A small variation in input needs to have a small variation in the hash so a distance function can be applied.

Those are terrible properties for a password.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton