Currently you're just SHA512'ing your users' passwords and sending the hash over the wire in the clear. This is INCREDIBLY insecure and you're putting your users at risk.
I don't know a good resource off the top of my head to best practices, could someone else provide a link?
Currently you're just SHA512'ing your users' passwords and sending the hash over the wire in the clear. This is INCREDIBLY insecure and you're putting your users at risk.
I don't know a good resource off the top of my head to best practices, could someone else provide a link?