3 ms·
If you do client side hashing then the hash becomes the password, it only helps with password reuse on other services. From your service perspective the securit
by 01acheru 4y ago
If you do client side hashing then the hash becomes the password, it only helps with password reuse on other services. From your service perspective the security issue doesn't change much.
- SAI_Peregrinus 4y agosaPAKEs are one possible solution, but none are currently standardized.
- eximius 4y agoI can already impersonate my users. But yes, client side hashing is just one part of a security story, but it sure does make log leaks less damaging.