[go-nuts] [ANN] go-tls-srp: TLS-SRP, secure connections without certs

i just published a client & server implementation of TLS-SRP, based
on crypto/tls.

TLS-SRP lets a client make a secure, authenticated TLS connection
to a server with only a username and password. no certificates are
needed. no certificate authorities have to be trusted.

you can find it at:

         https://bitbucket.org/mjl/go-tls-srp

this code is based on a stripped down version of crypto/tls from the
1.2 branch. i didn't integrate tls-srp into crypto/tls because it would
complicate the implementation (and tls-srp isn't in high demand afaik).
also, the api/interface would become less simple.

i tested it (successfully) against gnutls and openssl. the code could
still use a good (security) review. other feedback is welcome too!