Could you elaborate on this for us security newbs? Maybe expand the acronym?<p>I know enough to encrypt my password storage, but I never thought to encrypt passwords client-side. I'm interested in knowing what are best practices.