4 ms·
There is already a standard for this, called SRP: https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol https://en.wikipedia.org/wiki/Secure_Remote_Pass
by iancarroll 6y ago
There is already a standard for this, called SRP: https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...
- rladd 6y agoThis is claimed in the linked Wikipedia article to prevent phishing but how could it? If the phishing site presents a ui that looks like the real site, the user could be tricked into entering his real username/password which the attacker could then use to log into the real site. Or am I missing something?