4 ms·
When you connect to a website with ssl, your sensitive data is transmitted in a reversible form as well. I believe moat browsers will use the system keyring (w
by jimktrains2 5y ago
When you connect to a website with ssl, your sensitive data is transmitted in a reversible form as well.
I believe moat browsers will use the system keyring (which is usually encrypted based on your login password or a tpm) if present or use a master password to encrypt them at rest.
- teknopaul 5y agoMost websites are data sinks of anything that can be taken. No reason IMHO the login page should not always send a hash over ssl. (which is hashed again to test it)
- jimktrains2 5y agoI'm not sure what you mean by hash, but i6 think you're trying to describe mutual authentication, where the service also authenticates itself to the user. Look up things like pake, srp, and tls client certificates for more information. https://en.m.wikipedia.org/wiki/Mutual_authentication https://en.m.wikipedia.org/wiki/Mutual_authentication https://en.m.wikipedia.org/wiki/Secure_Remote_Password_protocol https://en.m.wikipedia.org/wiki/Secure_Remote_Password_proto... https://en.m.wikipedia.org/wiki/Password-authenticated_key_agreement https://en.m.wikipedia.org/wiki/Password-authenticated_key_a... https://en.m.wikipedia.org/wiki/Client_certificate https://en.m.wikipedia.org/wiki/Client_certificate