Скачать или смотреть The Caching Secrets of Pwned Passwords

Pwned Passwords leads the way in allowing developers to prevent users from reusing previously breached passwords, moving password security practices away from complex password composition rules that did little to help security.

Using a database of over 550 million breached passwords, Pwned Passwords serves over 10 million API requests a day. This API allows users to anonymously validate if their password has been leaked, this has been baked into websites, password managers and browser extensions alike.

Over 98.4% of requests to the Pwned Passwords API are cached by Cloudflare’s CDN. Such a high cache hit ratio is made possible using Cloudflare Workers and Argo.

Speaker bio: Junade Ali was the creator of the k-Anonymity model used by the Pwned Passwords API and drove the performance improvements on the service, during this talk he’ll describe the non-obvious tricks that were vital in optimising the performance and caching of the service.