Comment Comment by anilakar I'm still waiting for NIST to deprecate plain-text* passwords in favor of PAKE, and W3C to come up with a mechanism for that.*) plain-text here means any and all methods that give the attacker access to the original password, including modifying client-side JS. parent anilakar 2 years ago
*) plain-text here means any and all methods that give the attacker access to the original password, including modifying client-side JS.