I am writing a test project to understand the concept of hashing. I wonder, when I am hashing a password using the System.Security.Cryptography.HashAlgorithm class on an unencrypted iis server (http://) is the password initially sent across the network in
plaintext before being hashed by ASP.NET?
Also, is the method I tried below for hashing a password actually secure or do I need to do more? (Like add a salt or use a different algorithm?)
Code sample below:
protected void btnHash_Click(object sender, EventArgs e)
{
HashAlgorithm hashAlgorithm = HashAlgorithm.Create("SHA-512");
byte[] hashResult = hashAlgorithm.ComputeHash(Encoding.UTF8.GetBytes(txtBxHashThis.Text));
lblOutputOfHash.Text = Convert.ToBase64String(hashResult);
}
...
Go to the complete details ...