<input type=password> with hash function

Hey,

usually the password is transferred in plaintext and then the server applies salted hash.

So even if there is SSL, your private data is actually public - at least to the site owner.

To prevent this case, html should offer <input type="password" hash="sha256" salt="..."> ...

Best regards,

Matthias

Received on Wednesday, 21 July 2021 22:00:12 UTC