3 ms·
Can’t the hash be computed through some browser API? The browser can then visually show when plaintext passwords are being sent.
by Siira 6y ago
Can’t the hash be computed through some browser API? The browser can then visually show when plaintext passwords are being sent.
- y7 6y agoIf you're willing to rely on client-side code for authentication, there are better mechanisms, such as https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco... There is a standard for it, called TLS-SRP, but unfortunately no browser supports it.