0 Replies Latest reply on Aug 16, 2003 10:49 PM by icanoop

    SRP as login module with SSL

    icanoop

      Is there any reason for me to bother with SRP for authentication if I am using SSL?

      I'm pretty uneducated about security, so please explain if I am wrong here.

      It seems like the purpose of SRP is to keep passwords secure during authentication. But since SSL encrypts everything anyway, is it OK to use a simple LoginModule instead of SRP and still be secure?

      Are there any advantages to using SRP and SSL?