Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Hijacking this thread to say Batlle.net/Blizzard passwords are case insensitive altogether


This is because blizzard uses a cryptographically secure, non-disclosing, challenge and response protocol called SRP6 to authenticate users, rather than a password hash database. The password is not stored server side, but the client is able to prove it knew the original password based on its relation to a private/public key pair generated as part of the authentication scheme.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: