3 ms·
Wait why is the password being sent back by the server to the client? Is that what the commenter originally meant? If that's the case I completely misunderstoo
by throwawaymath 8y ago
Wait why is the password being sent back by the server to the client? Is that what the commenter originally meant?
If that's the case I completely misunderstood what they meant by processing the password with JavaScript. What you've described is insane; I thought the critique was in regards to processing a password locally before sending it to the server (e.g. local hashing).
- jakelazaroff 8y agoI believe so. This was the original description (emphasis mine): > I've even seen a website where the password is sent to the browser and the password checking happens in Javascript. i.e. the server sends the (plaintext or hashed) password to the client, and the client verifies it locally. Edit: the original commenter replied as a sibling to you: https://news.ycombinator.com/item?id=18382949 https://news.ycombinator.com/item?id=18382949