5 ms·
Dude what? I don't think anybody uses that. I've never heard of it before. Just because somebody created a thing doesn't mean it's safe or secure or that we sho
by ufmace 6y ago
Dude what? I don't think anybody uses that. I've never heard of it before. Just because somebody created a thing doesn't mean it's safe or secure or that we should all switch to it before it gets some solid testing and validation under its belt.
I don't see any plugins or libraries to add to any of the huge number of exiting authentication libraries. Has it even been subject to a hostile security audit? Has it been put in a place where it will face a serious state-sponsored attack and performed at least as well as existing systems?
- tomato2juice 6y ago> Dude what? I don't think anybody uses that. I've never heard of it before. Ya, the first time I heard of it I had the same reaction, but it's legitimate. https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco... That page is quite old, but lots of bodies use it: http://srp.stanford.edu/links.html http://srp.stanford.edu/links.html Amazon uses it in a service: https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html https://docs.aws.amazon.com/cognito/latest/developerguide/am... Also, as another commenter said, Apple uses it in Homekit.