ParentFull threadStefan-H·Hardly - if you are not using HTTPS in the first place then sending the hash across the wire instead of the password are the least of your worries.View on HN