It's part of the old-school HTTP Digest Auth ... • Aaron Parecki

57°F

🌌🌵🛸Bret🏜👨‍👩‍👧🚙 https://twitter.com/bcomnes • Dec 11
I know bcrypt/hash+salt on server for storage has been best practice for ages. Or has client/browser side hashing before sending to a server been wide spread?

It's part of the old-school HTTP Digest Auth https://en.wikipedia.org/wiki/Digest_access_authentication It just doesn't really solve things the way you'd expect.

Portland, Oregon • 42°F

Fri, Dec 11, 2020 7:57am -08:00

1 reply
Have you written a response to this? Let me know the URL:
- 🌌🌵🛸Bret🏜👨‍👩‍👧🚙 twitter.com/bcomnes
  
  ah yeah @Johannes_Ernst mentioned that. Looks like a funky variant of basic auth. > doesn't really solve things the way you'd expect. Know of any writing on perspective on that? Curious what the issues were SRP looks like a promising approach. medium.com/swlh/what-is-s…
  
  Fri, Dec 11, 2020 4:06pm +00:00 (via brid-gy.appspot.com)

Posted in /replies using monocle.p3k.io