France to require cleartext passphrase storage
Internet
France’s new data retention law requires online service providers to retain databases of their users’ addresses, real names and passwords, and to supply these to police on demand. Leaving aside the risk of retaining all this personal information (identity thieves, stalkers, etc — that which isn’t stored can’t be stolen and leaked), there’s the risk of requiring providers to store plaintext passwords, as Bruce Schneier points out. ~ BoingBoing
Patently absurd, insecure, and will end up only driving French web services overseas. Therefore, unenforcable.
