Comment by Ra8

What if the hash you're sending is discovered? I can use that to login to the service; it offers the same protection as a plain text password.