SaraMG
https://twitter.com/SaraMG
•
Mar 22
Is there any kind of JS+PHP "standard" for doing auth without ever sending any kind of replayable credential to the server? Something like a SCRAM conversation? Been thinking about ways of never allowing servers to see a plaintext password, and thus be unable to be compromised.
