3 ms·
Please please PLEASE authenticate over https. Currently you're just SHA512'ing your users' passwords and sending the hash over the wire in the clear. This is I
by matheist 11y ago
Please please PLEASE authenticate over https.
Currently you're just SHA512'ing your users' passwords and sending the hash over the wire in the clear. This is INCREDIBLY insecure and you're putting your users at risk.
I don't know a good resource off the top of my head to best practices, could someone else provide a link?
- PabloOsinaga 11y agoThanks. We will get it fixed.
- matheist 11y agoThank you! Looks like a great idea and I will definitely check it out.
- PabloOsinaga 11y agoCool. Let me know if you have any questions/comments as you do.