This question already has an answer here:
- What to transfer? Password or its hash? 4 answers
I'm working on an authentification system. Now in this system the user logs in and sends a hashed password to the server. Is this enough or do I have to rehash the password again?
So basically is this password => hash => network => hash => database
safer then password => hash => network => database? or is hashing already hashed passwords a waste of time and space?
or should it be password => network => hash => database?
As a bonus a likely future expension is to have users login on a remote server where creditals have to be saved and used in future interactions with the server resulting in something like this?
password => network => database1= > network => database2
does this mean having to has 2 or 3 times?