France banned storing passwords in hashed form

Not only in Russia, the government wants to fully control the privacy of its citizens, prohibiting them from using services with strong encryption .

The French also decided to take an extremely interesting step: to prohibit the storage of passwords in the form of hashes. In addition, services, whether an online store or a postal service, are now supposed to store all user data for 1 year. This information includes names, addresses, phone numbers and passwords.

Naturally, the police, tax authorities, customs officers and other “security agencies” have full access to this data.
')
And all the fun begins from the moment Google, Facebook, eBay and other Internet services also have to store data in the clear, so as not to contradict French law. Actually, they have already filed a lawsuit challenging such an original decision of the French government.

Based on the Air Force (eng) .

What does the habrasoobschestvo think?

UPD1: there are a lot of pluses, and karma is almost to a critical level: (

UPD2: an important note from the user aGRa , which brings some clarity:

Hmm. Yesterday, everything was ground on the slashdot ...

In short: for any account, the service provider must keep certain data for a year after the account is closed. Among the data that needs to be stored is “a password, means to check it.” A couple of lines below in the law says: "such data should be stored only if they were collected."

In other words:
1. If the password was stored in clear text - it must be stored for a year after the closing of the account.
2. If only the password hash was stored (password checker) - you need to keep a copy of this hash for a year.
3. If the password was not used at all, you do not need to store anything. During a year.

So set aside the panic.