Re: New Input type proposal

On Jan 10, 4:23 am, Alexander Mueller <noem... (AT) example (DOT) org> wrote:

Hi,

the reason behind my email is the proposal of a new Input type named "hash"

input type="hash" /

<...>

Please let me know any comments or suggestions you have.

Thank you,
Alexander Mueller

A few years ago we had implemented a similar concept using javascript
and hashing of the password pre posting.

As others have mentioned, it did not prevent hackers from obtaining
the hashed value, which of course was the same value as to be
retrieved on the server.

Perhaps naivety led us to feel that if the hacker did not know exactly
what was entered into the form (pre hash), then this was at least some
form of security.

I think it is a great idea that you have, and I do hope that it will
be at least investigated to the nth.