6 ms·

They probably just do two password checks.

• nimchimpsky 5y ago
  I doubt that very much
• chris_l 5y ago
  That's what I meant... hash both versions when logging in.
  • OJFord 5y ago
    Ah, it's a bit ambiguous though: not GP, but I read you as meaning do they store both versions' hash and check against either. Actually I realise GP is equally ambiguous. But I read that as (and my own assumption would be) frontend retries with the variation, backend verifies against the same only one stored.
• mnahkies 5y ago
  Yeah we did it this way on an app I worked on in the past, try the verbatim input and then a couple of minor variations in casing if it didn't work. I've also found that for email fields you need to be careful to normalize the input (trim, casing) as safari had a habit of autocorrecting the first character to be a capital
  • alin23 5y ago
    It’s very nice that you do that! I find apps that don’t trim the whitespace for the email field so annoying in terms of UX. I usually use a Text Replacement shortcut to fill in my emails (e.g. “gml” fills in my GMail address, “cld” my iCloud address etc.) and that always inserts a space after the email and I have to manually fiddle with the cursor to delete it.
  • Levitz 5y ago
    >I've also found that for email fields you need to be careful to normalize the input (trim, casing) as safari had a habit of autocorrecting the first character to be a capital Why is that relevant? The standard technically allows for case sensitivity but nobody does it
    • mnahkies 5y ago
      It can be problematic when you go to look up the account by email address during login and it isn't found due to inconsistent casing. It's technically true that the part before the domain can be case sensitive, but as nobody does this the gain in UX from people not having to know the exact casing used during sign-up is worth it to me.