undefined | Better HN

0 pointsjbrooksuk12y ago0 comments

I take it that the secret key is visible in the requests within Charles?

0 comments

2 comments · 1 top-level

CSDude12y ago· 1 in thread

Yes in a way, but actually no, it is hashed with some other values.

It's both hashed and the first few chars (four, IIRC) of the hash are transmitted, so it's really unlikely that one will be able to brute-force it.

j / k navigate · click thread line to collapse