Comment

Comment by arghwhat

No - As mentioned in a comment elsewhere, these kinds of experiments fall dangerously into a category of duct-tape crypto.

If you want secure password transfer, do not construct a ghetto solution with stacked hashes, but use a proper protocol like SRP (which, again, is pointless unless the client is trusted).

Especially in the case of Twitter, doing this provides absolutely nothing in respect to credential confidentiality as both sites of the transaction is written by Twitter.

parent arghwhat 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton