undefined | Better HN

0 pointsjoesb11y ago0 comments

The attacker would then intercept that scrypt hash sent from the client and use it to authenticate.

0 comments

1 comments · 1 top-level

timeal11y ago

You can't. The scrypt hash should be protected by HTTPS the same way a website password is protected by HTTPS.

j / k navigate · click thread line to collapse