Hacker News Reader

So on a modern machine that might mean a user can submit a 1GB password?

Your server should still have POST size limitations and other limits to prevent DoS.

I'm not sure relying on max POST size for password length is a good practice. It would be hell to debug without a good documentation.

> max POST size [...] hell to debug [...]

As I was saying :-)