I’ve been using Paul Johnston’s MD5 hash generator code for a while now, but I always felt a little weird using it. I knew he wasn’t doing anything nefarious with the text in those fields, but I wanted to put more effort into making sure it was impossible for my passwords to become part of an HTTP request in case the JavaScript had an error.
So I took his code, made a few changes, and put it on my own site. Now I can get my MD5’s without sending the original password out in the clear, without having to worry about using someone else’s site to do it.