4 ms·
Will this let us do SRP over HTTP?
by cldr 13y ago
Will this let us do SRP over HTTP?
- wmf 13y agoHTTP has now been essentially split into a lower transport layer and an upper semantics layer. If someone created an SRP extension for HTTP (see https://bugzilla.mozilla.org/show_bug.cgi?id=356855 https://bugzilla.mozilla.org/show_bug.cgi?id=356855 ) it would apply equally to HTTP 1.1 and 2.0. Or you could use SRP with TLS ( http://tools.ietf.org/html/rfc5054 http://tools.ietf.org/html/rfc5054 ), but this has the same UX problems as client certs.