← Back to context Comment by charcircuit 16 hours ago A hash of a public identifier like an email is personally identifiable data. 3 comments charcircuit Reply jounker 15 hours ago Isn’t the entire point of a cryptographically secure hash that you can’t derive the original information? charcircuit 15 hours ago You can't derive the original better than guessing. With public identifiers you can just take a list of them and guess with those. If someone asks for your email they can hash it themselves and compare it against whatever databases. pfortuny 16 hours ago You can always encrypt with a public key instead of hashing.
jounker 15 hours ago Isn’t the entire point of a cryptographically secure hash that you can’t derive the original information? charcircuit 15 hours ago You can't derive the original better than guessing. With public identifiers you can just take a list of them and guess with those. If someone asks for your email they can hash it themselves and compare it against whatever databases.
charcircuit 15 hours ago You can't derive the original better than guessing. With public identifiers you can just take a list of them and guess with those. If someone asks for your email they can hash it themselves and compare it against whatever databases.
Isn’t the entire point of a cryptographically secure hash that you can’t derive the original information?
You can't derive the original better than guessing. With public identifiers you can just take a list of them and guess with those. If someone asks for your email they can hash it themselves and compare it against whatever databases.
You can always encrypt with a public key instead of hashing.