Re: [Repoze-dev] JavaScript Hash for Login

2009-05-12 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Malthe Borch wrote: > 2009/5/12 Paul Johnston : >> I am going to have a go at adding a new authentication method to >> repoze.who. It's like the standard forms authentication, but uses >> JavaScript hashing to protect the password as it is transmitted.

Re: [Repoze-dev] JavaScript Hash for Login

2009-05-12 Thread Malthe Borch
2009/5/12 Paul Johnston : > I am going to have a go at adding a new authentication method to > repoze.who. It's like the standard forms authentication, but uses > JavaScript hashing to protect the password as it is transmitted. Excellent; there's been talking on this list previously about such a m

[Repoze-dev] JavaScript Hash for Login

2009-05-12 Thread Paul Johnston
Hi, I am going to have a go at adding a new authentication method to repoze.who. It's like the standard forms authentication, but uses JavaScript hashing to protect the password as it is transmitted. There's information about the scripts here, explaining how the system works, how it avoids replay