3 ms·
In 99% cases client sends the actual password to the server. If you don't want to send the actual password over the wire then you use SRP (or something similar)
by M4v3R 7y ago
In 99% cases client sends the actual password to the server. If you don't want to send the actual password over the wire then you use SRP (or something similar) mentioned in the original post.
- GhettoMaestro 7y agoThanks for clearing that up. I had incorrectly assumed that something other than SRP had come along to fulfill this need - I guess not!