interesting, thanks. turns out there are even patches for ssh! http://srp.stanford.edu/links.html http://srp.stanford.edu/links.html but i get the impression

interesting, thanks. turns out there are even patches for ssh! http://srp.stanford.edu/links.html http://srp.stanford.edu/links.html but i get the impression that still doesn't mean that ssh can be made to work with system passwords without transmitting them (over an encrypted channel). i don't understand why - maybe srp requires a particular kind of hash? ah yes - this answer http://security.stackexchange.com/questions/23821/srp-can-the-client-authenticate-using-only-the-stored-hash http://security.stackexchange.com/questions/23821/srp-can-th... gives some details.