Post
Peter 'R3KC4H' Garbæk
garbaek.dk
did:plc:p27rvylebfiov55aexejm2hs
Potentially yes. If a malicious PDS is discovered because of a typo and the client sends the user's password to that server, the operator could capture the plaintext password.
2026-07-04T10:40:31.119Z