|
|
c332322220
|
docs: Proton SRP-6a auth analysis + gopenpgp crypto requirements
Deep-dive analysis covering:
- SRP-6a protocol flow with password hashing versions 0-4
- Session management (AccessToken, RefreshToken, UID lifecycle)
- 2FA (TOTP + U2F) support
- Token storage requirements with NaCl secretbox recommendation
- gopenpgp crypto operations per product (Mail, Drive, Pass)
- Multi-address keyring management
- API endpoint reference
- Implementation recommendations for auth plugin
- Key risks and open questions for T1 architecture design
Sources: go-proton-api, go-srp, gopenpgp v2, hydroxide, proton-python-client
|
2026-06-08 18:29:58 +02:00 |
|
