Brute force protection

@memes

      • kautau@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        7 months ago

        Well yeah, if you don’t truncate the password to 12 chars how will you fit the plaintext in a memory efficient fixed latin1 CHAR column that only accepts letters, numbers, and underscores

        /s

    • gravitas_deficiency@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      7 months ago

      And then validate the email with a custom regex that definitely doesn’t account for all the valid syntax permutations defined by the several email-oriented RFCs

      • MoonMelon@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        7 months ago

        Only on mobile though, on desktop have different criteria. Perhaps give the text box an arbitrary max length of like 30 characters on sign-in but not on account creation.