Hash passwords before transmitting? (web)
- by wag2639
I was reading this Ars article on password security and it mentioned there are sites that "hash the password before transmitting"?
Now, assuming this isn't using an SSL connection (HTTPS), a. is this actually secure and b. if it is how would you do this in a secure manor?
Edit 1: (some thoughts based on first few answers)
c. If you do hash the password before transmission, how do you use that if you only store a salted hash version of the password in your user credentials databas?
d. Just to check, if you are using a HTTPS secured connection, is any of this necessary?