On Wed, 29 May 2002, Mark Crispin wrote: > OK, this is helpful and may be the breakthrough that was needed. > > How about the following: > [big snip...] > > This matches current reality.
I don't see SRP discussed anywhere. I feel more comfortable with it than CRAM-MD5 because of the issue of storage of passwords on the server. Is it too far out? In case you haven't heard of SRP, see: <http://www-cs-students.stanford.edu/~tjw/srp/index.html> -- Dave Funk University of Iowa <dbfunk (at) engineering.uiowa.edu> College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527 #include <std_disclaimer.h> Better is not better, 'standard' is better. B{
