2 ms·

Question, in what context is it even possible, or advisable, to catch mistyped passwords?

• danieltillett 12y ago
  Whenever you want to catch user errors client side rather than server side. It does not remove the need for security server side, but in my case it allows me to simplify the security aspects of my service and allow me to immediately drop any connection that is not using a potentially valid password. If a potentially valid password has been received then I do further checks on the actual password. Basically defence in layers. Another potential use is for checking coupon codes client side. Of course a JavaScript port would be good for this.