Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.javascript > #35324
| Newsgroups | comp.lang.javascript |
|---|---|
| Date | 2018-06-27 21:48 -0700 |
| References | (7 earlier) <slrnpj74af.3q5.jon+usenet@sable.unequivocal.eu> <ph04hb$63c$1@solani.org> <87zhzgp957.fsf@bsb.me.uk> <d8eed94d-fbe4-4d76-8d77-ed16a54ced63@googlegroups.com> <874lhnpw8e.fsf@bsb.me.uk> |
| Message-ID | <b15ee040-93bb-4a6f-985b-87f9e932667e@googlegroups.com> (permalink) |
| Subject | Re: Submitting *encrypted* forms via AJAX |
| From | Julio Di Egidio <julio@diegidio.name> |
On Thursday, 28 June 2018 02:53:44 UTC+2, Ben Bacarisse wrote: > Julio Di Egidio <julio@diegidio.name> writes: <snip> > Users need to get used to the idea that all > log-ins (indeed, if possible, all web traffic) should be over HTTPS. No shit. > > Can't you guys just do things by the book, start by learning from the expert, > > instead of bullshitting your way around this world? > > As it happens, I am an expert in this area (all-be-it a very minor one). You have changed the subject, which was about encryption, not authentication. And you cannot be an expert: security is an engineering, too... That said, indeed you are wrong. Read this for example (and follow the links, and then read more): <https://stackoverflow.com/a/7350936> << Basically, secure javascript does not exist. >> Now, there is a web crypto api that could change some things: but, even assuming that it's sound, it ain't generally supported yet. HTH, Julio
Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Submitting *encrypted* forms via AJAX bit-naughty@hotmail.com - 2018-06-25 02:48 -0700
Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-25 22:03 +0700
Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-25 17:21 +0200
Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-26 14:59 +0700
Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-26 16:47 +0200
Re: Submitting *encrypted* forms via AJAX Richard Damon <Richard@Damon-Family.org> - 2018-06-26 21:09 -0400
Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-27 09:45 +0200
Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 00:54 -0700
Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-27 13:29 +0000
Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-27 15:47 +0200
Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-27 16:00 +0100
Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 08:11 -0700
Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-28 01:53 +0100
Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 21:48 -0700
Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-28 09:17 +0000
Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-28 03:25 -0700
Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 14:04 -0700
Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-28 13:54 +0200
Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-28 13:46 -0700
Re: Submitting *encrypted* forms via AJAX jecxjo <jeff@sh0.xyz> - 2018-07-02 03:21 +0000
Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-07-15 04:56 +0200
Re: Submitting *encrypted* forms via AJAX "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2018-07-16 01:00 +0200
csiph-web