Isn'T this the norm? like, do not send the "plain"

Question

password to the server? but a hashed version?

0

25.07.2024

17 просмотров

yes, but the server might not be

0

3 месяца назад

If you have a MitM, they can intercept everything anyway

0

3 месяца назад

Then you can't trust it with your hashed password either

0

3 месяца назад

yes but they would have access to that service only, not the plaintext password to try to use it against other services

0

3 месяца назад

yes but in case my server gets compromised, you would only see hashed passwords go through, not plaintexts

0

3 месяца назад

Thomas · Accepted Answer

No, https is solid

0

3 месяца назад