April 8, 2024, 9:31 a.m. | /u/Iconic_gymnast

cybersecurity www.reddit.com

My lecturer told me to hash the password before sending it when writing an API login. However, I read blogs and asked in chats, and they said HTTPS already encrypts the password partially when sending it. Also, I'm using bcrypt with JWT already. Is it necessary to hash the password before sending it? For example, in the api/login in postman:

{

username: 'admin',

password: 'sa123456'

}

my lecturer wants it to be:

{

username: 'admin',

password: 'alsjlj2qoi!#@3ljsajf'

}

Could you …

api bcrypt blogs chats cybersecurity hash https jwt login password send send my writing

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

SITEC- Systems Security Administrator- Camp HM Smith

@ Peraton | Camp H.M. Smith, HI, United States

Cyberspace Intelligence Analyst

@ Peraton | Fort Meade, MD, United States

General Manager, Cybersecurity, Google Public Sector

@ Google | Virginia, USA; United States

Cyber Security Advisor

@ H&M Group | Stockholm, Sweden

Engineering Team Manager – Security Controls

@ H&M Group | Stockholm, Sweden