title: Password hashing at client browser
body: <p>What's the best way to hash the user password at the client browser, before sending it to the web server, so that only the hash goes out, not the plain-text password?</p>
  
  <p><strong>EDIT</strong>: assuming HTTP is used (not HTTPS)</p>