Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
5
Impact
~1k people reached

  • 0 posts edited
  • 0 helpful flags
  • 1 vote cast
Sep
24
awarded  Autobiographer
Sep
11
revised Which is more secure, using just bcrypt or SRP?
deleted 505 characters in body
Sep
11
comment Which is more secure, using just bcrypt or SRP?
wait, so just so I understand this all. SRP would only allow me to have salts that the users or any potential hacker can ascertain correct? My previous comment was rather stupid and I'm going to delete it along with unedit my edited question.
Sep
11
awarded  Supporter
Sep
11
revised Which is more secure, using just bcrypt or SRP?
added 507 characters in body
Sep
11
comment Which is more secure, using just bcrypt or SRP?
I wanted the ability there to make it as hard as possible to have someone figure out the user's passwords once they get the database. I'm planning on using ssl/tls upon the time I'm officially releasing it, because I'd rather not pay for the certificate until it's ready to go out. So basically then, SRP is for non-ssl, and it provides next to no additional security to passwords at rest when compared to plain bcrypt with teh work factor cranked up as time goes on.
Sep
10
awarded  Editor
Sep
10
revised Which is more secure, using just bcrypt or SRP?
cleared up some things.
Sep
10
asked Which is more secure, using just bcrypt or SRP?
Aug
5
awarded  Scholar
Aug
5
accepted How exactly are GPG keys mathematically related, and prime numbers inside of GPG general
Aug
4
awarded  Student
Aug
4
asked How exactly are GPG keys mathematically related, and prime numbers inside of GPG general