DEV Community

Discussion on: Would you send a plain text password from your website to the server over a secure connection?

Collapse
 
legolord208 profile image
jD91mZM2

Certainly not with passwords. If you hash at the client side, the hash essentially becomes your password. Plus a manual web request could store an unhashed version which would break your system. Plus the client would know the hash salt. It's all just a big mess you don't want to get in to.