blob: e4995a5381fb18aeecfc6b7c61758dc218b0c07d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<title>Secure remote password</title>
<link rel="stylesheet" type="text/css" href="bootstrap.min.css" />
<link rel="stylesheet" type="text/css" href="bootstrap-responsive.min.css" />
</head>
<body>
<div class="container">
<div class="row-fluid">
<div class="hero-unit span12">
<h1>Secure Remote Passwords</h1>
<p>
Secure remote passwords allow you to login with a password that will be unkown to the server and anyone eavesdropping
</p>
</div>
</div>
<div class="row-fluid">
<div class="span4">
<h2>1. Signup</h2>
<p>
First you signup just like normal. Your browser runs a bit of javascript and does not transfer your password but some validator based on it.
</p>
<% if @user.login %>
<p> You are signed up as <%= @user.login %>
<% if @user.active %>
<p> You are logged in.
<% end %>
<% end %>
<a href="signup.html" class="btn btn-primary btn-large" id="signup">
Signup now...
</a>
</div>
<div class="span4">
<h2>2. Login</h2>
<p>
Login using the same credentials. Again javascript is used to calculate a random number and a key based on it that the server then uses to validate your password.
</p>
<a href="login.html" class="btn btn-large" id="login">
Login
</a>
</div>
<div class="span4">
<h2>3. Verify</h2>
<p>
The server logs will tell you your password was not transmitted in clear. Never the less the server can determine wether you were authorized.
</p>
</div>
</div>
<script type="text/javascript" src="srp.js"> </script>
</body>
</html>
|
