9 messages in org.mozilla.lists.dev-tech-cryptoRe: Comment on tls-srp enhancement?
FromSent OnAttachments
Steffen SchulzDec 7, 2007 7:43 am 
Nelson BolyardDec 7, 2007 4:20 pm 
Steffen SchulzDec 7, 2007 7:50 pm 
Nelson BolyardDec 8, 2007 6:51 pm 
Steffen SchulzDec 12, 2007 10:34 am 
Michael StröderDec 13, 2007 7:26 am 
Steffen SchulzDec 13, 2007 9:27 am 
Nelson BolyardDec 15, 2007 4:48 pm 
Steffen SchulzDec 16, 2007 1:55 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: Comment on tls-srp enhancement?Actions...
From:Michael Ströder (mich@stroeder.com)
Date:Dec 13, 2007 7:26:42 am
List:org.mozilla.lists.dev-tech-crypto

Steffen Schulz wrote:

SRP is a great protocol also for authentication against your email provider or WLAN[1] access point. [..] That said, I agree that web-authentication is the major use case for TLS-SRP in NSS.

Hmm, without having looked at tls-srp but from my experience SSL/TLS connections are quite often terminated at a reverse proxy. But the password-based authentication information is passed to an application server beyond that reverse proxy which checks the password by some means.

I guess in case of tls-srp the reverse proxy (as TLS end point) would have also to check the password. This is not what most of my customers deploying reverse proxies want.

Ciao, Michael.