I'm sure there's a good reason why this won't work, but wouldn't it be possible - over SSL - to have the client generate a salt and hashed password, and send th

I'm sure there's a good reason why this won't work, but wouldn't it be possible - over SSL - to have the client generate a salt and hashed password, and send them (separately?) to the server? What's the hole I'm missing?