|
|
|
|
|
by matheist
3728 days ago
|
|
Please please PLEASE authenticate over https. Currently you're just SHA512'ing your users' passwords and sending the hash over the wire in the clear. This is INCREDIBLY insecure and you're putting your users at risk. I don't know a good resource off the top of my head to best practices, could someone else provide a link? |
|