How to send passwords from client to server

I am creating a web service using jersey.

The service must handle user registration. My plan is to get a registration request that will contain a username and password, save both of them in the MySql database and pull them out every time the user wants to log in.

I read that you must encode your password with Base64 before sending it, but it still sounds unsecured, because if someone intercepts it, it can easily decrypt it. So, how exactly should the client pass me the username and password? How to save them in db?

+4
source share
2 answers

. blob, .

bcrypt scrypt.

, , , , (bcrypt) . , , .

, , - , , . , ( ).

, SHA-3, :

  • , X , , , db, . , , " " .
  • , , db. , .
  • . , , , , ( , , - ).
+3

, , - - / , - . :

, (, https). , !

; , ( , ) .

0

Source: https://habr.com/ru/post/1653573/


All Articles