Tag Info

New answers tagged


I didn't implement such a system. But I can still answer your questions (I hope). A different password for each application is a nice feature to enhance security, so that a broken password won't immediatly give you access to all apps. The problem with logging in with a different password for each application is the amount of passwords. Google has like 10 ...


The problem I see is that while you're going to a lot of effort to avoid transmitting the users password, saltedSecret has essentially become a password. The main threat to a transmitted password is that a man-in-the-middle (MITM) will be able to observe it (in the absence of any other forms of encryption) and log into your system. If we look at how a ...

Top 50 recent answers are included