Comment by oe

Wouldn't you then need to sync the randomly generated salt across browsers? That doesn't seem so stateless anymore.