Hi,
I have a sign in page and I want to pass the email and password of the user but I want to discuss with you guys which one is more secure? to salt and hash the password locally and send it like this:
var content = new FormUrlEncodedContent(new[]
{
new KeyValuePair<string, string>("email", TextBoxSignupEmailAddress.Text),
new KeyValuePair<string, string>("salt", password_salt),
new KeyValuePair<string, string>("hash", password_hash),
});
Or just send the email and password and then salt it and hash it on remote like this:
var content = new FormUrlEncodedContent(new[]
{
new KeyValuePair<string, string>("email", TextBoxSignupEmailAddress.Text),
new KeyValuePair<string, string>("password", password)
});
What is your advise...
Thanks,
Jassim