3 ms·
Hashing on the client-side wouldn't make a difference if a MITM already has control of the SSL connection. They could just spoof the login form, swap out Hacker
by adbachman 14y ago
Hashing on the client-side wouldn't make a difference if a MITM already has control of the SSL connection. They could just spoof the login form, swap out HackerRank's hashing code, and take your password anyway.
If you don't trust the connection don't trust any part of it. Especially not the code your browser is executing.