133 reputation
5
bio website eamann.com
location Portland, OR
age 31
visits member for 2 years, 4 months
seen Aug 18 '13 at 22:08

Occupation(s)

Web developer, marketer, writer.

Senior Web Engineer with 10up.

WordPress-powered Projects

Social Network Thingies


Jul
8
awarded  Popular Question
Jul
2
awarded  Scholar
Jul
2
accepted How can I validate a hashed password if all I have is another hash?
Jun
27
awarded  Supporter
Jun
27
comment How can I validate a hashed password if all I have is another hash?
You're both partly right. Mainly, I don't want the password (or anything resembling a password) sent over the wire at all so it won't be logged if request logging is turned on - SSL prevents interception, but not request logging in IIS/Apache.
Jun
27
comment How can I validate a hashed password if all I have is another hash?
I like the idea of SRP, but from looking at the documentation it seems to be a lot of back-and-forth between the client and the server. My goal is that the client only makes one call to the server.
Jun
27
awarded  Student
Jun
27
awarded  Autobiographer
Jun
27
asked How can I validate a hashed password if all I have is another hash?