3 ms·
No reason the server can’t provide a nonce for the login to salt the hash.
by nucleardog 6y ago
No reason the server can’t provide a nonce for the login to salt the hash.
- withinboredom 6y agoAnd how would the server know the desalted hash?
- Sir_Substance 6y agoNow the server has to store the password in plain text so it can rehash with the new nonce every time.