note 15439 deleted from function.md5 by jimw
| From: | jimw@php.net | Date: | Sat, 08 Dec 2001 20:02:51 +0000 |
| Subject: | note 15439 deleted from function.md5 by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-22171@lists.php.net to get a copy of this message | ||
In response to the Editor's note re: MD5 on the client side-
As part of a complete authentication system, MD5 can be useful on the client side. For instance, if
there is some secret known to both the client and the server, but unknown to an attacker, this can
be used to maintain authentication throughout a session by hashing the secret, the session id, and
something that exists on the current page only (like a hidden form variable containing the time of
page generation)together.