title: Securing login form in a desktop app
body: <p>I currently have a desktop application which requires the user to have a username and a password. These credentials are stored on a webserver (myserver.com), so when he types the username and the password and clicks on the Login button, they're sent to the webserver.
  If the credentials are right, the server will return "ok" and the main form will be displayed. If not, the server will return "wrong" and an alert will be displayed.
  However, this is very insecure, because a user can just edit the hosts file, redirect myserver.com to his localhost, which always returns "ok", and bypass the login screen.</p>
  
  <p>How can I make a more secure login form for a desktop app?</p>