I believe so. This was the original description (emphasis mine): > I've even seen a website where the password is sent to the browser and the password checkin

I believe so. This was the original description (emphasis mine): > I've even seen a website where the password is sent to the browser and the password checking happens in Javascript. i.e. the server sends the (plaintext or hashed) password to the client, and the client verifies it locally. Edit: the original commenter replied as a sibling to you: https://news.ycombinator.com/item?id=18382949 https://news.ycombinator.com/item?id=18382949