>Don’t forget about the main point: hashing and salting on the client side does not replace doing the same thing on the server side. Per my original, top-level

>Don’t forget about the main point: hashing and salting on the client side does not replace doing the same thing on the server side. Per my original, top-level comment: "For that reason, it's a good idea to salt and hash passwords client-side as well." [emphasis.. nevermind.]