Re: Docs: Encourage strong server verification with SCRAM

> On 31 May 2023, at 23:14, Michael Paquier <michael@paquier.xyz> wrote:
> On Wed, May 31, 2023 at 10:08:39AM -0400, Jacob Champion wrote:

>> LGTM!
> 
> Okay.  Does anybody have any comments and/or objections? 

LGTM. As a small nitpick, I think this sentence is a little bit misleading:

    "..can use offline analysis to determine the hashed password from
     the client"

It's true that an attacker kan use offline analysis but it makes it sound
easier than it might be in practice.  I would have written "to potentially
determine".

--
Daniel Gustafsson