Hashing is done before storing the secret on the server side. Therefore they still need to communicate regarding the intial secret.