Isn'T this the norm? like, do not send the "plain"

Question

password to the server? but a hashed version?

0

25.07.2024

32 просмотра

yes, but the server might not be

0

25.07.2024

If you have a MitM, they can intercept everything anyway

0

25.07.2024

Then you can't trust it with your hashed password either

0

25.07.2024

yes but they would have access to that service only, not the plaintext password to try to use it against other services

0

25.07.2024

yes but in case my server gets compromised, you would only see hashed passwords go through, not plaintexts

0

25.07.2024

Thomas · Accepted Answer

No, https is solid

0

25.07.2024