Zero-Knowledge Unattended Passwords & Salted SHA-256 Challenge-Response

Leaving a workstation accessible for unattended remote access requires absolute confidence that neither a network eavesdropper nor a compromised signaling node can extract your permanent password.

Why Plaintext Password Transmission Is Obsolete

Per-Session Cryptographic Challenge-Response (Salted SHA-256)

When a client connects to the SimpleViewer signaling mesh, the server issues a unique 128-bit cryptographic challenge nonce. The viewer computes a salted SHA-256 proof combining the password hash, session nonce, and target 9-digit Device ID — proving knowledge of the password without ever sending the secret over the wire.

Automated 15-Minute IP Brute-Force Lockout

Any source IP that triggers 5 failed password proofs within a 10-minute window is automatically rate-limited and blocked for 15 minutes, with instant visibility in the Central Admin Security Firewall.