search

junosuarez / web-login

A maximally minimal proposal for browser-based user identity management
44 stars 6 forks source link

Challenge-Response instead of GUID? #9

Closed terinjokes closed 10 years ago

terinjokes commented 10 years ago

Instead of sending the GUID over the wire as the single source of truth, could web-login be implemented with some sort of challenge-response?

ForbesLindesay commented 10 years ago

Isn't this is a duplicate of #8 in that #8 describes the problem that this is trying to solve? It would make more sense to discuss potential solutions in the same issue as the problem was raised.