3 ms·
There is a lot of password-based authentication schemes that enables to not share the password with the remote end. You can send a hash. Or you can answer a cha
by vbernat 10y ago
There is a lot of password-based authentication schemes that enables to not share the password with the remote end. You can send a hash. Or you can answer a challenge.
- andersonmvd 10y agoIndeed, you're correct. Although the server always got something. And if it was a hashed password, well, works as if the password wasn't hashed UNLESS the hash changes AFTER some challenge prior the authentication attempt.