Comment by gpm

> Hashing in the client leads to a fair share of security issues, especially if it's not also hashed on the backend using the usual salted hashes.

I've yet to see someone give a good reason to not hash on the client and the server... I would be curious to hear if you have any.

It's definitely non-standard though.