I am very new to authentication/ssl especially combined with ios. My question is, if I am sending a username and password to lets say https://server.com/login.php do I need to hash my passwords in the iOS client or can I post the text of password then hash them before they are stored in the DB?
I am very new to authentication/ssl especially combined with ios. My question is, if
Share
Hash them beforehand for sure!
Sure you’re using https, but it’s a best practice to never send sensitive information in plain text if you can help it.