3 ms·
Hash the password on the client side before submitting to the server.
by cpeterso 6y ago
Hash the password on the client side before submitting to the server.
- zrm 6y agoThis still requires you to hash the hash on the server, otherwise the hash becomes the password and learning the hash allows you to login. But hashing the hash is actually better anyway because it makes it so that the server never even has the plaintext of the password, which can be dangerous in itself when users use the same password on multiple sites.
- mfontani 6y agoHow could one log in whilst having JS disabled?