And since the fresh password are clear and you may tamper-clear, fraud is efficiently impossible into the both sides