From 6aa98cdd0cd9e6a0d4c769bbf0327492ccc28f42 Mon Sep 17 00:00:00 2001 From: Mattias Andrée Date: Tue, 13 Apr 2021 01:57:43 +0200 Subject: Add readme MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Mattias Andrée --- README | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 README diff --git a/README b/README new file mode 100644 index 0000000..1461186 --- /dev/null +++ b/README @@ -0,0 +1,16 @@ +secauth is a protocol for authentication. + +It is not a secure alternative to encrypted +communcation, nor is it a password hashing algorithm, +but is used between the two. + +If used correctly, secauth ensures the server owner, +or someone with access to the server, does not get +access to the user's plain-text password. It also +gives the user a lower bound for the security with +which the server is treating the password. + +Additionally, if an attacker breaks the communication +encryption, he will not access to the user's plain-text +password and the information he gets access to is not +reusable. -- cgit v1.2.3-70-g09d2