iOS app - hash user password in-app or on-server? @Polynomial: All websites that use "HTTPS" already somehow handle certificate distribution and management. Are you seriously saying that websites using "HTTPS" are nonstandard and too inconvenient for typical users?