181 reputation
6
bio website
location
age
visits member for 1 year, 10 months
seen Mar 21 '13 at 6:03

Jul
2
awarded  Curious
Mar
2
accepted Java SecureRandom generate secure random number
Mar
1
asked Java SecureRandom generate secure random number
Feb
17
comment How does SRP prevent man-in-middle attacks?
Yes I knew this just, said if not using the TLS, but the subsequently exchanged data will be encrypted using some of the encryption algorithm.
Feb
17
comment How does SRP prevent man-in-middle attacks?
If the exchanged data will be encrypted using the shared key, it only prevent the mitm attack but not integrity right?
Feb
17
accepted Pure SRP authentication without TLS
Feb
17
comment How does SRP prevent man-in-middle attacks?
Can I claims that SRP can prevent attacker who trying impersonate either client or server. But it doesn't protect the data subsequently. Attacker still can perform packet modification attack? Using SRP/TLS, TLS will create a secure channel.
Feb
17
comment How does SRP prevent man-in-middle attacks?
@user20851 yes I read that.
Feb
16
asked How does SRP prevent man-in-middle attacks?
Feb
16
asked What makes EAP-SRP-256 better than SRP?
Feb
12
asked Pure SRP authentication without TLS
Feb
8
accepted Which is better for SSL: TLS_EDH or TLS_SRP?
Feb
8
awarded  Commentator
Feb
8
comment Which is better for SSL: TLS_EDH or TLS_SRP?
One more thing to clarify is that, said i using TLS-SRP connection, does this include authentication client already (I suppose it does since SRP) or just establish the secure channel only. I had studied about the RDP Protocol, it first establish a TLS channel and then using kerberos to authenticate user. I was thinking using SRP to authenticate the client and TLS to secure the channel prevent eavesdropping, man-in-middle attack. Some people suggested the TLS can used DHE_RSA to achieve forward secrecy. JSSE doesn't support TLS_SRP key exchange. Please correct me. Thanks
Feb
8
comment Which is better for SSL: TLS_EDH or TLS_SRP?
Hi, thanks for your answer, but said if I want create a remote desktop application using Java and I establish a TLS connection with SRP as key exchange mechanism. Is it possible since remote desktop application is not in web form, sound like SRP more suitable to use in web form authentication
Feb
8
accepted Implementing Secure Remote Password with Remote Desktop Application
Feb
8
awarded  Editor
Feb
8
revised Which is better for SSL: TLS_EDH or TLS_SRP?
added 66 characters in body
Feb
8
asked Which is better for SSL: TLS_EDH or TLS_SRP?
Jan
24
asked Is SSH2 still vulnerable to man-in-middle attacks?