Remove tag google
article thumbnail

Understanding Have I Been Pwned's Use of SHA-1 and k-Anonymity

Troy Hunt

Every time this very blog loads Font Awesome from Cloudflare's CDN, for example, it's verified against the hash in the integrity attribute of the script tag (view source for yourself). Half a decade ago now, Google researchers demonstrated precisely this with their SHAttered attack. is the middle one.

Passwords 124