4 ms·
> Hash it on the client? So are you not using salted hashes for your password store? There is no reason you can't also salt on the client. Salts do not need to
by throwawaymath 8y ago
> Hash it on the client? So are you not using salted hashes for your password store?
There is no reason you can't also salt on the client. Salts do not need to be secret. The substantial constraint you outlined in your comment isn't a problem.