Does it make security sense to hash password on client end

后端 未结 10 1616
清酒与你
清酒与你 2020-12-23 12:21

If you were to hash a user\'s password prior to sending it across the line and leaving it in plain-text in memory, would this improve the security of the application?

<
10条回答
  •  南方客
    南方客 (楼主)
    2020-12-23 12:36

    I can give you different kind of approach If you have not SSL you can hash password on client side and again it hashed on server side using another hashing method and store them on database and when user login with password do the same process and match double hashed password with stored hashes

提交回复
热议问题