Has anyone implemented the Secure Remote Password protocol in ColdFusion, ideally for ColdBox?
If you’re not familiar with it, it’s a protocol that allows password authentication without sending the password across the net or storing it or an equivalent on the server, and it’s highly resistant to man-in-the-middle attacks. IMO, this is the state of the art in password authentication, would be a great addition to the ColdBox ecosystem.
Nimbus SRP is an open source Java implementation, with a companion JavaScript client library, ThinBus SRP.
From those infos, it seems doable in CF, but if someone has done it already, or is stronger in Java than me (not hard) and is interested in having at it, that’d be great.