Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

  • unmagical
    link
    fedilink
    arrow-up
    2
    ·
    29 days ago

    You still need to deal with that on the server. The client you build and provide could just truncate the input, but end users can pick their clients so the problem still remains.

    • DaPorkchop_
      link
      fedilink
      arrow-up
      1
      ·
      29 days ago

      The server can just reject any password hash it receives which isn’t exactly hash-sized.