|
|
Posted by Harlan Messinger on 01/09/08 19:02
J.O. Aho wrote:
> Alexander Mueller wrote:
>> Hi,
>>
>> the reason behind my email is the proposal of a new Input type named "hash"
>>
>> <input type="hash" />
>>
>> I am now going into detail about why I'd consider it as important and
>> technical information as well as comparisons to current techniques.
>
> I can't see any extra advantage of your input has, more than it will just
> consume more bandwidth for transporting the data. The has type will always be
> the same for a site,
The attribute tells the *browser* what kind of hash to create.
> as the passwords will always be stored in that type, a
> site that uses md5 hashed passwords will never request a sh1 hashed password,
> as then they can't validate the password is correct.
The browser doesn't have pre-existing knowledge that such-and-such site
uses MD5 hashed passwords (though a default hash method could be defined
in the standard, just as there is a default value for the enctype
attribute of the form tag).
Navigation:
[Reply to this message]
|