Dan Stromberg <strombrg at dcs.nac.uci.edu> writes: > > No. It's vulnerable to dictionary search. Use SRP if you can. > Where can I learn more about this? http://srp.stanford.edu as already mentioned. Also, RFC 2945 describes an older version (still ok).