It is also, unfortunately, infeasible to use in web applications without some kind of plugin, much less across many different browsers. Blizzard still needs people to be able to log into battle.net to renew their subscriptions and buy vanity mounts.
If you control the client side and it's a normal client/server-type application, absolutely, go for it. It poses much less risk to your users than any scrambling or key derivation protocol, no matter how strong. (Those do nothing to prevent getting your favorite password by snooping on ethernet traffic or memory, for example.) As you mentioned, SRP too has adjustable knobs.
Comments
It is also, unfortunately, infeasible to use in web applications without some kind of plugin, much less across many different browsers. Blizzard still needs people to be able to log into battle.net to renew their subscriptions and buy vanity mounts.
If you control the client side and it's a normal client/server-type application, absolutely, go for it. It poses much less risk to your users than any scrambling or key derivation protocol, no matter how strong. (Those do nothing to prevent getting your favorite password by snooping on ethernet traffic or memory, for example.) As you mentioned, SRP too has adjustable knobs.