> You can perform the first pass of salted hashing on the client-side. Not really. JavaScript crypto is fundamentally broken: an attacker, malicious server or

> You can perform the first pass of salted hashing on the client-side. Not really. JavaScript crypto is fundamentally broken: an attacker, malicious server or disgruntled employee can replace server-side JavaScript and remove the client-side hashing at any time. This is, notably, why Firefox Accounts are completely and totally insecure (and hence why Sync is unsuitable for storing any private data at all).