6 ms·
The difference is that I can verify the code, and the data send. If I send the password to serverside hashing, I can only trust the server to handle it correctl
by hvidgaard 10y ago
The difference is that I can verify the code, and the data send. If I send the password to serverside hashing, I can only trust the server to handle it correctly. Security wise that is a fairly important difference.
- temprature 10y agoAre you saying you not only know of some website that does password hashing client-side but that you also inspect the javascript that site serves you every time you login?
- hvidgaard 10y agoSecurity wise there is a difference. This difference don't matter to the average person. I don't reuse passwords, so I don't need this protection.