#authentication

Two years later, the auth question gets answered

hdauth closes out the "undecided" authentication section from the first CMS attempt - challenge/response over HD-derived keys, no passwords stored anywhere.