New answers tagged

1

I'm prototyping an app that uses client-side password hashing in order to hide the "real" account password from a server (the server hashes any recieved password anyway, so no plaintext records in the database). It seem to be a controversial thing to do but I didn't find any convincing arguments against it (I'm new to cryptography so please correct me if I'm ...


1

It seem to be a controversial thing to do but I didn't find any convincing arguments against it It can be a good solution if you can transmit the salt from the server to the client, e.g. in apps or desktop apps and has some nice load-distribution properties. the server hashes any recieved password anyway, so no plaintext records in the database This is ...


Top 50 recent answers are included