Comment

Comment by Musky

This has also been noted by Assured AB when they did their security audit of the service [0].

> 3.4.1 Note Plaintext search queries in cache database

> Assured recommended hashing search terms before insertion / lookup in the cache database. Since search term cache lookups are only performed with exact matching, this should not affect functionality.

> Mullvad: We are now hashing (and salting) the search terms before they are added to Redis

[0] - https://mullvad.net/en/blog/2023/5/16/security-audit-of-our-...

parent Musky 3 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton