Re: Submitting encrypted forms via AJAX

Path	csiph.com!feeder.erje.net!1.eu.feeder.erje.net!weretis.net!feeder4.news.weretis.net!feeder5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From	"Christoph M. Becker" <cmbecker69@arcor.de>
Newsgroups	comp.lang.javascript
Subject	Re: Submitting encrypted forms via AJAX
Date	Mon, 25 Jun 2018 17:21:14 +0200
Organization	solani.org
Lines	27
Message-ID	<pgr199$rfs$1@solani.org> (permalink)
References	<075dc3b9-1b96-4bc9-9d88-a79ee815e8e2@googlegroups.com> <1ayv347oigack.t9kcyjsxesx9$.dlg@40tude.net>
Mime-Version	1.0
Content-Type	text/plain; charset=utf-8
Content-Transfer-Encoding	7bit
X-Trace	solani.org 1529940073 28156 127.0.0.43 (25 Jun 2018 15:21:13 GMT)
X-Complaints-To	abuse@news.solani.org
NNTP-Posting-Date	Mon, 25 Jun 2018 15:21:13 +0000 (UTC)
User-Agent	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0
In-Reply-To	<1ayv347oigack.t9kcyjsxesx9$.dlg@40tude.net>
Content-Language	de-DE
Cancel-Lock	sha1:4O/zDh4MiVZ8nDw6Rr+YE+dZHrI=
X-User-ID	eJwFwQERADEIAzBL46H8Iaew4l/CEnhazh+JDCzW763GhEkx5MfGYXeeXSOsBUWXVATMgQc/lRIK
Xref	csiph.com comp.lang.javascript:35309

Show key headers only | View raw

On 25.06.2018 at 17:03, JJ wrote:

> On Mon, 25 Jun 2018 02:48:27 -0700 (PDT), bit-naughty@hotmail.com wrote:
>
>> Hi, I have a Login box on my website, with a name and password field. When
>> it's submitted, I want it to happen without a refresh (ie. the
>> authentication), and I also want the form data to be ENCRYPTED between
>> client and server (because of the password). 
>>
>> Number 1) How do I submit? How do I get the form data into a format that
>> "request.send" in the AJAX call will take? Do I have to extract the form
>> data myself with "document.forms" and muck about with it somehow? and 2)
>> How do I encrypt? Is putting a "https" in the "request.open("POST",
>> https<blah blah>);" enough, or do I have to do something else? 
>>
>> Thanks muchly for your help.
> 
> You'll have to encrypt it manually, before the form is submitted.

Absolutely!  And by all means, use ROT13 for encryption, since it is the
strongest encryption method of all times! ;)

Kidding aside: why would you manually encrypt the form submission,
instead of relying on TLS?

-- 
Christoph M. Becker

Thread

Submitting *encrypted* forms via AJAX bit-naughty@hotmail.com - 2018-06-25 02:48 -0700
  Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-25 22:03 +0700
    Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-25 17:21 +0200
      Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-26 14:59 +0700
        Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-26 16:47 +0200
          Re: Submitting *encrypted* forms via AJAX Richard Damon <Richard@Damon-Family.org> - 2018-06-26 21:09 -0400
            Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-27 09:45 +0200
              Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 00:54 -0700
              Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-27 13:29 +0000
                Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-27 15:47 +0200
                Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-27 16:00 +0100
                Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 08:11 -0700
                Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-28 01:53 +0100
                Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 21:48 -0700
                Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-28 09:17 +0000
                Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-28 03:25 -0700
                Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 14:04 -0700
                Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-28 13:54 +0200
                Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-28 13:46 -0700
  Re: Submitting *encrypted* forms via AJAX jecxjo <jeff@sh0.xyz> - 2018-07-02 03:21 +0000
    Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-07-15 04:56 +0200
      Re: Submitting *encrypted* forms via AJAX "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2018-07-16 01:00 +0200

csiph-web