Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Remind me again

Name: Anonymous 2016-11-03 17:57

Why don't websites use public keys for authentication instead of passwords?

Name: Anonymous 2016-11-04 13:44

>>15
sure it is, but then you're constantly generating private/public keypairs. this is slow, and so is using public key crypto for everything. PK crypto for everything is acceptable for e-mail because they're usually neither big enough nor frequent enough for this to be noticeable (although per-mail keypair generation would probably be a bit annoying), and you can't simply use Diffie Hellmann key exchange due to their asynchronous nature. in a normal HTTP connection, packets are sent often enough for this to considerably slow down browsing and there's nothing preventing you from performing DHKE.

tl;dr stop putting square crypto in round protocols, just use SSL/TLS (it's not perfect but it's the best thing we have now)

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List