[esnard]

Thanks to k-anonimity, you never send the full hash, only the first 20 bits.

[mbid]

Yes, I know. It's certainly better to leak only the first eigth of your password than all of it, but it's still not something you should do.