I wouldn’t send the salt to the client. Have it hash the password, then the server hashes that with the salt for comparison and storage.
But that would mean you can’t verify the password complexity server side, which can be bad for certain accounts.
- 0 posts
- 3 comments
Joined 3 years ago
Cake day: June 10th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
The point is to whitewash America’s racism, it’s okay because the Europeans also are a bit racist. Don’t try to compare how similar or different it is, that would destroy their take.


The client salt would need to be consistent and “public” since the client needs it before login. It’s basically useless.