Well if you're going to implement a crypto protocol over just using an off-the-shelf solution you're probably screwed anyway[1]. SRP over SSL is secure as far a

Well if you're going to implement a crypto protocol over just using an off-the-shelf solution you're probably screwed anyway[1]. SRP over SSL is secure as far as I know, and SRP is certainly better than most of the other home-brew solutions proposed here. [1] I've read your blog before and know that I don't need to tell you this, but the generally community might :-)