3 ms·
The salt is not attacker-controlled.
by bullen 8y ago
The salt is not attacker-controlled.
- jessaustin 8y agoI thought the left column above was the client/attacker? She doesn't actually have to use the salt you send her... [EDIT:] Actually never mind. I'm sure this is all fine, and look how much more efficient this 3-way back-and-forth conversation is than any conventional auth scheme would be. You should design all your own auth.