3 ms·

> "bad guy" could just re-post the exact same hash and login anyway. That's true, thanks for the response.