Running a hash locally is equally useless. You've effectively turned the hashed value into the password itself, achieving nothing. There are secure key-exchang

Running a hash locally is equally useless. You've effectively turned the hashed value into the password itself, achieving nothing. There are secure key-exchange schemes that don't require sending over the raw password, but this isn't an example of one.