undefined | Better HN

0 pointsarielweisberg12d ago0 comments

This can be implemented without storing it. They could store a hash. No idea what they actually do.

0 comments

A hash of a public identifier like an email is personally identifiable data.

Isn’t the entire point of a cryptographically secure hash that you can’t derive the original information?

You can't derive the original better than guessing. With public identifiers you can just take a list of them and guess with those. If someone asks for your email they can hash it themselves and compare it against whatever databases.

pfortuny12d ago

You can always encrypt with a public key instead of hashing.

pbhjpbhj12d ago

You mean 'as well as', right?

1 more reply

j / k navigate · click thread line to collapse