Feb. 3, 2023, 10:53 a.m. | /u/damn_tech

cybersecurity www.reddit.com

I note that a number of sites / applications send a users username and password to the server in plain text over HTTPS, where it is then processed by the backend to authenticate the user/issue a token etc. Let's discount HTTP entirely for this as we all know sending plaintext credentials over HTTP is a deadly sin.

I wonder whether a better practice might be that a users credentials are hashed at the client side before being sent to the …

applications backend client credentials cybersecurity discount etc hashing http https issue password plain text plaintext practice send server text token username

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

EY GDS Internship Program - SAP, Cyber, IT Consultant or Finance Talents with German language

@ EY | Wrocław, DS, PL, 50-086

Security Architect - 100% Remote (REF1604S)

@ Citizant | Chantilly, VA, United States

Network Security Engineer - Firewall admin (f/m/d)

@ Deutsche Börse | Prague, CZ

Junior Cyber Solutions Consultant

@ Dionach | Glasgow, Scotland, United Kingdom

Senior Software Engineer (Cryptography), Bitkey

@ Block | New York City, United States