[hvidgaard]

If a MitM attack can get my hash, what do you think they can get if I send the password to be hashed by the server?

[grey-area]

So what does your hash add?

[hvidgaard]

Verifiable protection against data breaches.