Skip to main content

Home/ Akademik Güvenlik/ Group items tagged knowledge

Rss Feed Group items tagged

Filter: All | Bookmarks | Topics Simple Middle
Seçkin Anıl Ünlü

uTorrent Web - Privacy - 1 views

web.utorrent.com/privacy

privacy µtorrent web authentication online srp security password

shared by Seçkin Anıl Ünlü on 07 Feb 11 - No Cached
  • The µTorrent Web servers do not see the details of your torrent activity. If you add a torrent, for example, we know that a torrent was added, but not the torrent URL or infohash.
  • µTorrent Web uses a cryptographic protocol called SRP, the Secure Remote Password protocol.
  • your web browser serves as the client and your uTorrent client as the server. The µTorrent Web servers act only as a channel between the two.
  • ...4 more annotations...
  • uses JavaScript to authenticate to your client
  • SRP allows each side (browser and uTorrent client) to independently arrive at the same value for a cryptographically-strong secret. This secret is then used as a session key to encrypt the body of the request (which contains the infohashes, URLS, etc.) using the AES encryption standard. This occurs entirely in your web browser, before the request is sent to µTorrent Web for proxying to your uTorrent client.
  • An attacker or intermediary who has access to the entire SRP negotiation should gain no information which would enable him to recover the password. It is effectively a zero knowledge proof (http://en.wikipedia.org/wiki/Zero-knowledge_proof) to the server that the client has the password.
  • SRP provides perfect forward secrecy: even if an adversary is able to somehow compromise your password, it will not allow the decryption of past sessions.
1 - 3 of 3
Showing 20▼ items per page