News for hackers. Stuff that matters.

A comment on CBCrypt: Encrypt from the client rather than send passwords to servers.

Re:CBCrypt: Encrypt from the client rather than send passwor... by peterwwillis on Tuesday October 06, 2015 @11:34AM (#10339559)
Throw a password on SSL/TLS client certificates and you have something that sounds about the same. Nobody used it because it was confusing to users.
[ Parent | on HN ]
Re:CBCrypt: Encrypt from the client rather than send passwor... by joeuser3932 on Tuesday October 06, 2015 @09:56PM (#10343746)
Password on an x509 cert requires the x509 cert to be stored or made available to the client somehow. The whole point of CBCrypt is to allow password authentication and encryption without the user needing to change any behavior or learn anything.
[ Parent | on HN ]