[JDEV] New Secure Authentication Mechanism

[Chris Chen]

Hi,

Has anyone considered RFC 2945 (SRP implementation) as perhaps an 
alternative form of authentication for Jabber?

I personally think that 0k authentication is a little unwieldy because you 
have to periodically update the counter when it hits zero.

With SRP, password authenticate is transmitted securely without a need for 
certificate-based or public key-based authentication.

What do you guys think?

Chris


PGP at ldap://certserver.pgp.com/