2

Possible Duplicates:
Is using Gravatar a security risk?
Is Gravatar a privacy risk?

Since the Gravatar is generated based on the email address. Is it possible to determine a user's email address based on their Gravatar?

  • 1
    where is the duplicate question? – rubo77 Jun 19 '12 at 16:01
4

The email addresses in Gravatar are stored as MD5 hashes. It's the same kind of one-way protection used in password storage.

|improve this answer|||||
  • 2
    But for avatars, the "password" might be much more easily guessed, and then validated against the hash. Like when assuming a display name might also be the user name at one of the main email providers. – Arjan Feb 18 '11 at 19:59
  • 10
    @chrisay It's only used for passwords by incompetent programmers, because brute-forcing md5 is fast. And for the same reason it sucks when hiding email addresses too. – CodesInChaos Jan 28 '12 at 16:54

Not the answer you're looking for? Browse other questions tagged .