[stubish]

You are assuming a lack of salt when the client hashes the password.

[ralfk]

You are right, in this case he can use a salt for the hash - my second point is still valid though, but I guess that is fundamentally so if you want to use passwords

[ahomeDesk]

While there is no 100% secure system, we are working very very hard to make our system as much secure as possible.