3 ms·
The attacker would then intercept that scrypt hash sent from the client and use it to authenticate.
by joesb 12y ago
The attacker would then intercept that scrypt hash sent from the client and use it to authenticate.
- timeal 12y agoYou can't. The scrypt hash should be protected by HTTPS the same way a website password is protected by HTTPS.