logoalt Hacker News

charcircuityesterday at 9:52 AM2 repliesview on HN

How do you send a password reset email with this. Eventually your mail server will need the plaintext address in order to send the email. And that point can be leaked in a data breach.

It's idealistic to think this could solve data braches because businesses knowing who their customers are is such a fundamental concept.


Replies

johnisgoodyesterday at 12:44 PM

A password reset e-mail is supposed to expire pretty quickly though, so would it really matter in practice?

show 1 reply
j2kunyesterday at 6:48 PM

I don't think this is possible with FHE alone.