Re: Encrypt password

From: Paul Ingles (paul@oobaloo-dot-co-dot-uk)
Date: 06/27/02


From: "Paul Ingles" <paul@oobaloo-dot-co-dot-uk>
Date: Thu, 27 Jun 2002 21:25:35 +0100


The only way you could do it would be making use of client side script, or
Java.

You can't do it using ASP.NET since it is executed on the server, and thus
if you wanted to convert plaintext into ciphertext, the plaintext version
would have to be sent to the server.

I've seen examples of e-Commerce sites that use Java applets to enter your
card number into, this (I guess) encrypts it and sends it to a page or
something that captures the encrypted data. I'm not sure how these work in
detail.

The alternative is to code it in JavaScript :) Hope you've got a free month
or so.

In the end, I would suggest going with SSL. It's tried and (somewhat)
trusted :) The extra benefit you get from having a certificate signed by
someone like VeriSign is real benefit, as opposed to trying to persuade
people what you've coded is secure. Certificates aren't greatly expensive
now, and in my opinion well worth it.

Paul

"Peter Vermeesch" <PVR76@hotmail.com> wrote in message
news:OO6VG4dHCHA.2516@tkmsftngp13...
> Hi,
>
> If I'm not using SSL, is it possible to encrypt a password(-string) that
an
> user fills in a textbox before it is posted to the server?
>
> thanx
>
> Peter Vermeesch
> Synerco.be
>
>
>
>



Relevant Pages

  • Most users cant connect to our SSL-- help!
    ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
    (comp.security.misc)
  • Most users cant connect to our SSL-- help!
    ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
    (comp.security.ssh)
  • Most users cant connect to our SSL-- help!
    ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
    (comp.security.unix)
  • Re: Antw: Re: LDAP Authentication Problem
    ... TLSv1 und wird auf einen SSL Client Hello Request mit TLSv1 nicht ... antworten anstatt ein SSLv3 Server Hello. ... the LDAP PAM module and the shadow package. ...
    (de.comp.sys.novell)
  • RE: php4
    ... Mod_php4 only gets loaded if you define SSL. ... Of course I restarted apache after the install... ... # Based upon the NCSA server configuration files originally by Rob McCool. ... Not all browsers support this. ...
    (freebsd-newbies)