There is no valid reason that the full information needs to be sent to the server to implement this kind of protection IMO
There is no valid reason that the full information needs to be sent to the server to implement this kind of protection IMO