Where is the password hash generated during authorization - on the client or server side?

Question

User identification

Quite a lamer question on the topic of the authorization mechanism.
How does the password get to the server? In open form or already in the form of a hash? If in open form, how is the password protected from interception by sniffers? With the help of https or are there any other security mechanisms?

Answer 1

The password to the server comes mostly in clear text, you can, of course, overtake it on the client into some kind of sha512, but there is not much sense in this, it will hide the password in clear text from the interceptor, but it will not save you from gaining access. Https is the only and best way to protect against interception.

Answer 2

The hash is usually obtained on the server side.
I haven't heard anything other than https.

Answer 3

On the server side, give yourself a free ssl certificate from the Chinese