12 ms·
If the hashing takes too long (e.g. 5-10 seconds) the website also risks a denial of service attack.
by mtmail 3y ago
If the hashing takes too long (e.g. 5-10 seconds) the website also risks a denial of service attack.
- layer8 3y agoYes, though if you do both client-side and server-side hashing (which might be a good idea [0]), then the server only receives the fixed-size client hash. [0] https://security.stackexchange.com/a/100517 https://security.stackexchange.com/a/100517