3 ms·

I think Zed Shaw is on this for some time. http://autho.me/ http://autho.me/

• Raphael 16y ago
  Shouldn't his login page be HTTPS? Or does the cryptography make that redundant?
  • benatkin 16y ago
    That's what he's attempting, and he convinced one skeptic that it might work. http://news.ycombinator.com/item?id=2083774 http://news.ycombinator.com/item?id=2083774 http://www.curated.by/splaice/zed-shaw--dan-kaminsky-talk-about-authome http://www.curated.by/splaice/zed-shaw--dan-kaminsky-talk-ab...
  • zedshaw 16y ago
    I actually don't have HTTPS on autho.me on purpose to make sure nobody uses it for anything serious. When I get serious about it it'll be SSL encased properly. This also lets you dump the protocol and watch what I'm doing so that you can make sure the SRP is not sending your password and information. And I need to get back to working on that.