3 ms·
> Or hashing could be done on the client side. Only if you use a proper PAKE. A vanilla password hash is still a bearer token on the wire.
by nly 11y ago
> Or hashing could be done on the client side.
Only if you use a proper PAKE. A vanilla password hash is still a bearer token on the wire.