A website complained at me for trying to make a password too long. Their limit is 40 characters. Oh.
@benhamill Whenever I see a length limit on a password field this tells me one thing "we store your password, not its hash".
@deshipu @benhamill Well... Mastodon limits passwords to 72 letters :-(
@cesar @deshipu See https://crypto.stackexchange.com/questions/24993/is-there-a-way-to-use-bcrypt-with-passwords-longer-than-72-bytes-securely
@benhamill @deshipu that's very cool. I didn't know that.
@cesar @deshipu Yeah. TIL that as well. Nice people on Mastodom are nice.
@benhamill @deshipu that's very cool. I didn't know that.