3 ms·
»And that is the current state of the art in password protection.« It is not really state of the art; storing passwords in plain text or hashing them are just b
by danbruc 14y ago
»And that is the current state of the art in password protection.« It is not really state of the art; storing passwords in plain text or hashing them are just by far the most common solutions. I think something like the Secure Remote Password protocol [1] deserves the label state of the art much more although it is not widely deployed.
[1] http://en.wikipedia.org/wiki/Secure_Remote_Password_protocol http://en.wikipedia.org/wiki/Secure_Remote_Password_protocol
- jgrahamc 14y agoI actually considered writing a series of article about zero-knowledge proofs. One day...
- rwg 14y agoIt's unfortunate that SRP is one of those things that's technically sound and has been around for a fairly long time but has never seen widespread implementation for whatever reason. (See also: IPv6, SCTP, C99.)