3 ms·
Wouldn't that allow for a compromised database to leak the information a nefarious user needs to log into accounts? Compared to needing to find a collision if a
by ribosometronome 6y ago
Wouldn't that allow for a compromised database to leak the information a nefarious user needs to log into accounts? Compared to needing to find a collision if a database of hashes leaked?
- nicoburns 6y agoI think client-side password hashing is generally in addition to server-side hashing. Not instead of it.