Hacker News new | ask | show | jobs
by jessaustin 2934 days ago
I thought the left column above was the client/attacker? She doesn't actually have to use the salt you send her...

[EDIT:] Actually never mind. I'm sure this is all fine, and look how much more efficient this 3-way back-and-forth conversation is than any conventional auth scheme would be. You should design all your own auth.