So, no changing of email without changing the password then? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		lotu on June 7, 2012 \| parent \| context \| favorite \| on: Storing Passwords Securely So, no changing of email without changing the password then?

jmaygarden on June 7, 2012 [–]

No, just require that the password is entered to change the user's email address. Then a new hash can be generated and stored.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact