Hacker News Reader

But you have. It means even if you refuse your passwords elsewhere, only the website that was compromised is compromised.

You can (and should) store the salt server-side. Moving the hashing to the client does not solve anything.

Really, that should be a salted hadh to really defend against password reuse.