Viewing profile — tada-ssola

Ah answered elsewhere, if the client sends the hash and you log the hash then you still have a problem. The user should change passwords. Although I think this still improves the s…

I think there is value in that. I would still be sure to hash it a second time on the server. My guess is that this isn't popular because of the added client side complexity. I'm a…