4 ms·
This is terrible. Question, under that law, do you need to store plaintext passwords if you hash the passwords on the browser side, since you don't "collect" t
by Tyr42 15y ago
This is terrible.
Question, under that law, do you need to store plaintext passwords if you hash the passwords on the browser side, since you don't "collect" the actual password from the user, as it never leaves their computer?
- lurker19 15y agoUnless you have some sort of server-trusted hardware system running on the client, hashing on the client is equivalent to not hashing at all, since you cannot force a client to hash before sending a password guess.