Quote:
Originally Posted by perfphysio
Personally I don't just see why you can't encrypt it on the way in and also on the way out as a reminder.
|
Not sure what you mean with "on the way out".
Passwords are not encrypted, but hashed. The big difference is that encryption is a 2-way process (plain->encrypted->plain) and hashing is a 1-way process (you can not decrypt a hashed value). Also the password is already hashed at the client-side and the unencrypted password is never send over the networ/internet or received by the server.