3 ms·
The future is hopefully something more secure than client-side hashing, probably SRP, or it’ll be NTLM all over again. It would be nice if web browsers implemen
by carey 17y ago
The future is hopefully something more secure than client-side hashing, probably SRP, or it’ll be NTLM all over again. It would be nice if web browsers implemented it directly, but until then there are JavaScript libraries like http://server.denksoft.com/wordpress/?page_id=27 http://server.denksoft.com/wordpress/?page_id=27 .
- tptacek 17y agoDo not implement crypto algorithms in Javascript. Very dangerous. Also, there's no way to serve them securely unless the whole login process is SSL/TLS anyways.