Secure Cookie Auth with CouchDB(jasondavies.com)
jasondavies.com
Secure Cookie Auth with CouchDB
http://www.jasondavies.com/blog/2009/05/27/secure-cookie-authentication-couchdb/
2 comments
Thanks!
> But SRP is totally irrelevant in a browser context, because any technique you can use to safely deliver SRP code to the browser can be used just as easily to safely exchange passwords directly. SRP will be relevant when browsers bake it in.
If you read the conclusion, this is why I ripped out the SRP stuff :-) Can't wait for TLS-SRP to hit the browsers.
> But SRP is totally irrelevant in a browser context, because any technique you can use to safely deliver SRP code to the browser can be used just as easily to safely exchange passwords directly. SRP will be relevant when browsers bake it in.
If you read the conclusion, this is why I ripped out the SRP stuff :-) Can't wait for TLS-SRP to hit the browsers.
CouchDB is pretty awesome.
But, all this article said is: "Hey we have a great Idea and it Works. [mumbles]For sufficiently small values of works."
But, all this article said is: "Hey we have a great Idea and it Works. [mumbles]For sufficiently small values of works."
But SRP is totally irrelevant in a browser context, because any technique you can use to safely deliver SRP code to the browser can be used just as easily to safely exchange passwords directly. SRP will be relevant when browsers bake it in.