101 reputation
3
bio website
location
age
visits member for 2 years, 7 months
seen Feb 10 at 22:35

Feb
10
comment Why almost no webpages hash passwords in the client before submitting (and hashing them again on the server), as to “protect” against password reuse?
@x4u Thank you for the explanation.
Feb
10
comment Why almost no webpages hash passwords in the client before submitting (and hashing them again on the server), as to “protect” against password reuse?
@x4u If the server sends a random value for each login, wouldn't the client-generated hash (from the password+salt) be different every time? How does the server validate this against the stored password hash in its database?
Sep
24
awarded  Autobiographer
Oct
10
awarded  Analytical
Oct
9
awarded  Supporter