My login security design

[Dynasoft]

Basically if you're giving a copy of the client to the user, then the user can break it open and see what it's doing.

Real security is hard. Security of an application should be rated like safes are, i.e. on time taken to crack it.

If he knows how to snoop, then he knows how to replay. Little program called "WPE PRO" should do the trick.

True.
Plus, most passwords are lost to keyloggers, not packet sniffers, anyway.

[James]

If he knows how to snoop, then he knows how to replay. Little program called "WPE PRO" should do the trick.

Haha WPE PRO! That's a blast from the past