[larkeith]

While there is merit to clientside hashing, you should always hash serverside as well, lest a leak prove catastrophic.