4 ms·
And this is one reason why client side hashing is a good idea (in addition to other procedures). Even if you screw up, the impact is so much less severe.
by eximius 4y ago
And this is one reason why client side hashing is a good idea (in addition to other procedures).
Even if you screw up, the impact is so much less severe.
- 01acheru 4y agoIf you do client side hashing then the hash becomes the password, it only helps with password reuse on other services. From your service perspective the security issue doesn't change much.
- SAI_Peregrinus 4y agosaPAKEs are one possible solution, but none are currently standardized.
- eximius 4y agoI can already impersonate my users. But yes, client side hashing is just one part of a security story, but it sure does make log leaks less damaging.