3 ms·
No you can't. The security improvement of PAKE over traditional HTML forms + TLS is that the server never knows the password plaintext; the threat model is a c
by LukeShu 8y ago
No you can't. The security improvement of PAKE over traditional HTML forms + TLS is that the server never knows the password plaintext; the threat model is a compromised first-party server. If the server is compromised, it can just change the SRI hashes that it sends to the client. SRI is only an effective protection against compromised third-party services.
- lvh 8y agoI can't believe I'm defending save-an-HTML-file-to-disk as a model, but, in their defense: their did say _download_, so you can't mess with the SRI hash. (I don't think this is a good idea, I'm just saying technically your criticism doesn't apply, though you are correct in how SRI works. I'm so sorry :()
- LukeShu 8y agoI mean, tptacek's claim was that "your users will have to install something to make a PAKE secure." If your interpretation of the_clarence's comment is correct, then he didn't refute tptacek's claim, he just suggested a rather silly value of something; something="an HTML file".
- lvh 8y agoSure, his rebuttal wasn’t either :)
- the_clarence 8y agoSri was just an example of how to make it light. Hell you don't need to use sri. Download the whole page and keep using it. But again that's like downloading native apps.