advantage of md5+salt in asp.net applciation
<p>I have a question about how to use md5 and a salt to secure a password, I have already made many searches for answers to my questions.</p>

<p>An article I saw was using c# to convert password to md5 string, something like this:</p>

<pre><code>public static string md5(string &lt;b&gt;sPassword&lt;/b&gt;)
{
    System.Security.Cryptography.MD5CryptoServiceProvider x = new System.Security.Cryptography.MD5CryptoServiceProvider();
    byte[] bs = System.Text.Encoding.UTF8.GetBytes(sPassword);
    bs = x.ComputeHash(bs);
    System.Text.StringBuilder s = new System.Text.StringBuilder();
    foreach (byte b in bs)
    {
        s.Append(b.ToString("x2").ToLower());
    }
        return s.ToString();
    }
}
</code></pre>

<ol>
<li><p>My question is the above code seems server side is its mean password traveling over internet in plain text doesn't it create any security issue or it does not matter i don't know (may be i am getting it wrong way or i am not clear about password security concept) ?</p></li>
<li><p>What i have done in my project is i am creating a secure password at client side with java script md5.js file and with user's entered password before posting login.aspx form back to server then at server side i am fetching hashed password of user from database(which was stored at the time of registration of user with same technique) and match both client side and server side hashed passwords if they match user authenticated. 
i don't know weather i am doing it right way or not please let me know right way if i am wrong .</p></li>
<li><p>Now the problem is i want to use SALT with the md5 (md5+salt) to make password more secure with <b> Randomly </b> generated salt string. how to do this should i make a random salt string at server side while page_load of login page and then send it to client side and at client mix this salt with user password before posting form. after post again mix the password(fetched from database) with same random string and match both password to authenticate. </p></li>
<li><p>One more question, at the time of registration of a new user, where should originally user entered password convert in md5 at client side or server side if at server side then password should post to server as it is means original password.(like "MyPassword") </p></li>
</ol>
