4 ms·
If you transmit the hash, it's either going to be unsalted, or the salt will have been sent ahead of time, leaving it open to being brute forced. Further, it's
by drivebyacct2 14y ago
If you transmit the hash, it's either going to be unsalted, or the salt will have been sent ahead of time, leaving it open to being brute forced. Further, it's still a huge MITM attack because if you can login to whatever.com with theonewolf/HASHOFYOURPASSWORD then I can sniff that... and login as theonewolf/HASHOFYOURPASSWORD too.