Does it make security sense to hash password on client end

后端 未结 10 1614
清酒与你
清酒与你 2020-12-23 12:21

If you were to hash a user\'s password prior to sending it across the line and leaving it in plain-text in memory, would this improve the security of the application?

<
10条回答
  •  情话喂你
    2020-12-23 12:51

    You'd be much better off if you used the Secure Remote Password protocol (SRP). It was designed for this.

提交回复
热议问题