Securely send password using ajax request

Question

to find out if it is safe to send a password through an Ajax request?

I have a login window that calls an ajax request to try to login / pass and get a JSON object with errors (if any).

Should I use form redirection instead?

[EDIT] Saving the encrypted password in the database is not a solution, because the login and password sent by ajax are the login / password for accessing the database itself (internal application).

Answer 1

, , - HTTPS HTTP. , , , .

Answer 2

. crypt(text,key), crypt(crypt(T,A),B) == crypt(crypt(T,B),A), :

• KEY. .
• , crypt(password,KEY) .
• , RAND
• , crypt(password,RAND) AJAX. .
• crypt(crypt(password,RAND),KEY) , crypt(crypt(password,KEY),RAND) . .

, . SSL- HTTPS .

Answer 3

:

-

: -, ( session_id),

: pw , ( session_id),

[: --, , ]

hash-salt-hash , ...

Answer 4

, , - " ". , , . javascript, , .

, , , , . , , SSL, , .