3 ms·

>What's the threat model you have in mind for salting and hashing on the client? If your server is compromised, you don't want it handling plaintext/raw passwo

• thaumasiotes 6y ago
  > If your server is compromised, you don't want it handling plaintext/raw password input from your users. This doesn't work; see the other line of the comment you're responding to: >> if your adversary has broken your TLS then they can also intercept cookies or inject code to capture the plain text You're assuming that the attacker controls the connection with the user. Such an attacker is free to serve a login page that sends the unhashed password, and read that.
  • rl3 6y ago
    >You're assuming that the attacker controls the connection with the user. I am making no such assumptions. >Such an attacker is free to serve a login page that sends the unhashed password, and read that. Depending on the nature of the server exploit, and depending on if the client code is even delivered via the same server handling requests in the first place. Both are quite large assumption to make.