Stay away from SRP. Browsers don't support it natively, and there are (so far as... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tptacek on June 1, 2008 | parent | context | favorite | on: Ask YC: Best Practices for User Authentication

Stay away from SRP. Browsers don't support it natively, and there are (so far as I can tell) no peer-reviewed libraries for it for the major web stacks. SRP is easy to get wrong.

johnm on June 2, 2008 [–]

I did say to use SSL in practice, right?

Reading about SRP would help solve much of confusion people seem to be having in many of the discussions going on in this thread.

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact