1. Signup

- First you signup just like normal. Your browser runs a bit of javascript and does not transfer your password but some validator based on it. -

- <% if @user.login %> -

You are signed up as <%= @user.login %> - <% if @user.active %> -

You are logged in. - <% end %> +

1. Signup

+ First you signup just like normal. Your browser runs a bit of javascript and does not transfer your password but some validator based on it. +

+ <% if @user.login %> +

You are signed up as <%= @user.login %> + <% if @user.active %> +

You are logged in. <% end %> - - Signup now... - -

2. Login

- Login using the same credentials. Again javascript is used to calculate a random number and a key based on it that the server then uses to validate your password. -

- -

3. Verify

- The server logs will tell you your password was not transmitted in clear. Never the less the server can determine wether you were authorized. -

- - - + <% end %> + +

2. Login

+ Login using the same credentials. Again javascript is used to calculate a random number and a key based on it that the server then uses to validate your password. +

+ +

3. Verify

+ The server logs will tell you your password was not transmitted in clear. Never the less the server can determine wether you were authorized. +

- - - - diff --git a/views/layout.erb b/views/layout.erb new file mode 100644 index 0000000..c68ac23 --- /dev/null +++ b/views/layout.erb @@ -0,0 +1,27 @@ + + + + + Secure remote password + + + + + +

+ +

Secure Remote Passwords

+ Secure remote passwords allow you to login with a password that will be unkown to the server and anyone eavesdropping +

+ + <%= yield %> + + + + + diff --git a/views/login.erb b/views/login.erb new file mode 100644 index 0000000..32a16e5 --- /dev/null +++ b/views/login.erb @@ -0,0 +1,18 @@ +

2. Login

+ diff --git a/views/signup.erb b/views/signup.erb new file mode 100644 index 0000000..3a949ab --- /dev/null +++ b/views/signup.erb @@ -0,0 +1,20 @@ + +

1. Signup

+ + -- cgit v1.2.3