Comment

Comment by intrepidlemon

Not necessarily. They could run str.lower() on the password input before hashing and saving the hash. Then to verify the password, you just always run str.lower() on the input before calculating the hash.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton