Comment by manch23

Its my understanding that the hashing should not be done client side, as that would expose the secret salt that is being used and reduce security?