in reply to Re^3: Replacing crypt() for password login via a digest - looking for stronger alternative
in thread Replacing crypt() for password login via a digest - looking for stronger alternative

Good find! And there's a mechanism to not transmit the real password over: https://haveibeenpwned.com/API/v2#SearchingPwnedPasswordsByRange (saw it via Password::Policy::Rule::Pwned), still I would prefer inhouse service if site is big and serious enough.

  • Comment on Re^4: Replacing crypt() for password login via a digest - looking for stronger alternative

In Section Seekers of Perl Wisdom