Hi all,
I have a login form on my web site (I don't use the Asp.Net login/membership system).
Everything works fine, but I want the login password to not be sent in plaintext (due to the risk of hijacking). I know that this can be achieved in principle using MD5 or the like, but is there a common implementation for use with Asp.Net? Of course, it's crucial that the resulting hash (?) isn't easy to decrypt. When I read various posts on this matter, some people say it's just to do a reverse on the encrypted string, so that in effect, this is totally useless.
Can anyone set me straight and point me to a easy solution? (I don't need a lesson on how to (not) store passwords in the db; I'm just looking for a way to get the transmisson from the client to the server more secure than plaintext.
Thanks a lot,
Pettrer
...
Go to the complete details ...