From 62a6107133473cc35fb1b21ba7aff244efc0bd2b Mon Sep 17 00:00:00 2001 From: Ardis Lu Date: Mon, 4 Dec 2023 21:35:14 -0800 Subject: [PATCH] Add warning about using pwned worker --- README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/README.md b/README.md index 3e64430..b994ae3 100644 --- a/README.md +++ b/README.md @@ -172,6 +172,12 @@ https://x.y.workers.dev?https://example.com ## pwned +> [!CAUTION]
The underlying Pwned Passwords API used in this worker uses a +> [_k_-anonymity model](https://en.wikipedia.org/wiki/K-anonymity) to preserve +> your privacy. This worker negates that benefit. This worker should only be +> referenced for education, not actually used in a production backend.

+> [Click here to read more.](https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/#cloudflareprivacyandkanonymity) + Checks a password against the [have i been pwned?](https://haveibeenpwned.com/) API and returns a boolean indicating if the password has been pwned or not. This is a simplified implementation of the -- 2.47.3