One additional note about the hashed emails: Similar to the newsletter use-case, the only other real reason to store emails in plaintext that I can think of is to send unsolicited emails at any point in the future.

For systems that store both emails and passwords to facilitate login (which stacker news DOES NOT), you can still support features like Forgotten Password/Password Reset without storing the email address in plain text. As ek noted, you just have to use a universal salt for all emails, since the user can't be expected to provide the salt when attempting to login. This was actually discussed on the PR where this support was added.

Thanks for posting. Will check it out later tonight.

Great show! Little bit of background noise though.

@Wumbo tracklist

rss/pod: https://share.transistor.fm/s/d8cc2a10