Similar to the introduction section, there are a few things that could be added here. Mutual authentication using passwords is pretty awesome in my opinion. PKI is great and all but the required, trusted third party and maintenance overhead is not well suited to many application domains. SRP is an excellent compromise between security and ease-of-use.