From 81dc07fabde178ee40a1ddfff5dfd74c5021347f Mon Sep 17 00:00:00 2001 From: Azul Date: Tue, 3 Jul 2012 15:40:21 +0200 Subject: more info and resources on the index page bit of styling added --- example/views/index.erb | 67 ++++++++++++++++++++++++++++++++++-------------- example/views/layout.erb | 1 + 2 files changed, 49 insertions(+), 19 deletions(-) (limited to 'example/views') diff --git a/example/views/index.erb b/example/views/index.erb index 0ff91e1..d35bd85 100644 --- a/example/views/index.erb +++ b/example/views/index.erb @@ -1,50 +1,79 @@ - +
-
-

1. Signup

-

- Your browser transfers an encrypted verifier based your password. But it does not send the password itself. -

+
+

Features

+
    +
  • Mutual handshake - validates server on login
    • +
  • Using strong cryptography
    • +
  • No eavesdropping on the network
    • +
  • Challange response prevents replay attacs
    • +
  • Seeding prevents dictionary attacs on the server
    • +
-

2. Login

+

Resources

- You enter your password - your browser exchanges encrypted data with the site to check if it was the right one. + Official website at Stanford

-
-
-

3. Verify

- You can see from the logs that your password was not send. The login process is different each time so it can't be replayed. + Wikipedia Article on SRP

+

Libraries and Implementations:

+
+
+
+

Try it ... It works just like a normal password - but it's more save.

+

1. Signup

+

+ Your browser transfers an encrypted verifier based your password. But it does not send the password itself. +

<% if @user %>

You are signed up as <%= @user.login %>.

<% end %> + <%= button_link(:signup, :primary => !@user) %>
+

2. Login

+

+ You enter your password - your browser exchanges encrypted data with the site to check if it was the right one. +

<% if @user && @user.active %>

You are logged in.

<% end %> + <%= button_link(:login, :primary => @user && !@user.active) %>
+

3. Verify

+

+ You can see from the logs that your password was not send. The login process is different each time so it can't be replayed. +

+ <%= button_link(:verify, :primary => @user && @user.active) %>
- <%= button_link(:signup, :primary => !@user) %>
- <%= button_link(:login, :primary => @user && !@user.active) %>
- <%= button_link(:verify, :primary => @user && @user.active) %>
- - - - +
+
+
+
diff --git a/example/views/layout.erb b/example/views/layout.erb index 6b56eac..2b4e8f2 100644 --- a/example/views/layout.erb +++ b/example/views/layout.erb @@ -5,6 +5,7 @@ Secure remote password + -- cgit v1.2.3