network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 4 months |
| seen | Mar 21 at 6:03 | |
| stats | profile views | 8 |
|
Mar 2 |
accepted | Java SecureRandom generate secure random number |
|
Mar 1 |
asked | Java SecureRandom generate secure random number |
|
Feb 17 |
comment |
How does SRP prevent man-in-middle attacks? Yes I knew this just, said if not using the TLS, but the subsequently exchanged data will be encrypted using some of the encryption algorithm. |
|
Feb 17 |
comment |
How does SRP prevent man-in-middle attacks? If the exchanged data will be encrypted using the shared key, it only prevent the mitm attack but not integrity right? |
|
Feb 17 |
accepted | Pure SRP authentication without TLS |
|
Feb 17 |
comment |
How does SRP prevent man-in-middle attacks? Can I claims that SRP can prevent attacker who trying impersonate either client or server. But it doesn't protect the data subsequently. Attacker still can perform packet modification attack? Using SRP/TLS, TLS will create a secure channel. |
|
Feb 17 |
comment |
How does SRP prevent man-in-middle attacks? @user20851 yes I read that. |
|
Feb 16 |
asked | How does SRP prevent man-in-middle attacks? |
|
Feb 16 |
asked | What makes EAP-SRP-256 better than SRP? |
|
Feb 12 |
asked | Pure SRP authentication without TLS |
|
Feb 8 |
accepted | What is the most suitable key exchange in TLS? |
|
Feb 8 |
awarded | Commentator |
|
Feb 8 |
comment |
What is the most suitable key exchange in TLS? One more thing to clarify is that, said i using TLS-SRP connection, does this include authentication client already (I suppose it does since SRP) or just establish the secure channel only. I had studied about the RDP Protocol, it first establish a TLS channel and then using kerberos to authenticate user. I was thinking using SRP to authenticate the client and TLS to secure the channel prevent eavesdropping, man-in-middle attack. Some people suggested the TLS can used DHE_RSA to achieve forward secrecy. JSSE doesn't support TLS_SRP key exchange. Please correct me. Thanks |
|
Feb 8 |
comment |
What is the most suitable key exchange in TLS? thanks for your help on editing the questions |
|
Feb 8 |
comment |
What is the most suitable key exchange in TLS? Hi, thanks for your answer, but said if I want create a remote desktop application using Java and I establish a TLS connection with SRP as key exchange mechanism. Is it possible since remote desktop application is not in web form, sound like SRP more suitable to use in web form authentication |
|
Feb 8 |
accepted | Implementing Secure Remote Password with Remote Desktop Application |
|
Feb 8 |
awarded | Editor |
|
Feb 8 |
revised |
What is the most suitable key exchange in TLS? added 66 characters in body |
|
Feb 8 |
asked | What is the most suitable key exchange in TLS? |
|
Jan 24 |
asked | Is SSH2 still vulnerable to man-in-middle attacks? |
