Hacker News new | ask | show | jobs
by systemfreund 2572 days ago
The login form usually sends the password in cleartext and it's then hashed on the server-side prior to comparing it to the hash stored in the database.

So they can just determine the password's strength at the time when the user is logging in