title: Password hashing (non-SSL)
body: <p>How is the password sent from browser to server in case of non-ssl transfer?</p>
  
  <p>I want to use bcrypt to hash password+salt before sending.... but it seems there is no javascript implementation for the bcrypt algorithm... </p>
  
  <p>is md5, SHA-1 good enough?</p>
  
  <p>PS: My site does not store any user personal information.. I just want that user intended password is not hacked as user might be using the same password at other sites that contains his/her personal information</p>