Comment Comment by Ra8 > Whenever I've written authentication, passwords are hashed on the client side and never transmitted in the clear.Unless I'm misunderstanding what you're doing, this achieves nothing.Hashing the password on the client side makes the hash the password, and MITM attacks are still possible. parent Ra8 20 days ago
Unless I'm misunderstanding what you're doing, this achieves nothing.
Hashing the password on the client side makes the hash the password, and MITM attacks are still possible.