Implement k-anonymity for password-based sign up.

liberapay / liberapay.com

Source code of the recurrent donations platform Liberapay

https://liberapay.com/

1.66k stars 214 forks source link

Implement k-anonymity for password-based sign up. #1795

Closed EdOverflow closed 4 years ago

EdOverflow commented 4 years ago

It would be nice to cross-check passwords in breaches during the sign-up and password-reset process. This is in similar vein to #1001: the goal being to ensure good password hygiene.

Resources:

https://haveibeenpwned.com/API/v2#PwnedPasswords
https://en.wikipedia.org/wiki/K-anonymity#Hash_Based_k-Anonymity

Changaco commented 4 years ago

Duplicate of #986.

EdOverflow commented 4 years ago