Path: csiph.com!weretis.net!feeder4.news.weretis.net!feeder5.news.weretis.net!news.solani.org!.POSTED!not-for-mail From: "Christoph M. Becker" Newsgroups: comp.lang.javascript Subject: Re: Submitting *encrypted* forms via AJAX Date: Wed, 27 Jun 2018 15:47:23 +0200 Organization: solani.org Lines: 24 Message-ID: References: <075dc3b9-1b96-4bc9-9d88-a79ee815e8e2@googlegroups.com> <1ayv347oigack.t9kcyjsxesx9$.dlg@40tude.net> <5696879.fPQVyQoktA@PointedEars.de> <3824731.5j0TqHaiX3@PointedEars.de> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: solani.org 1530107244 6252 127.0.0.43 (27 Jun 2018 13:47:24 GMT) X-Complaints-To: abuse@news.solani.org NNTP-Posting-Date: Wed, 27 Jun 2018 13:47:24 +0000 (UTC) User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 In-Reply-To: Content-Language: de-DE X-User-ID: eJwFwQEBwDAIAzBLcCjt7cCGfwlLEOU1zEIlFkvjDumtiVLbEfXhQNY1PXda9yLD94/W2gMZghFD Cancel-Lock: sha1:ucoPstfWYFBor5VJZYzjt/dAzZU= Xref: csiph.com comp.lang.javascript:35319 On 27.06.2018 at 15:29, Jon Ribbens wrote: > On 2018-06-27, Thomas 'PointedEars' Lahn wrote: > >> Richard Damon wrote: >> >>> You provide the attacker with no more information than they have when >>> you use TLS, as the encryption algorithm is just as know. >> >> Incorrect; read again. >> >> To use an example that you should be able to understand: Encryption by >> client-scripting that is like locking the door of my house, and pin a post- >> it note to the door that says “@Burglar: The key is below the mat.”, where >> the key actually is. > > You should look into this newfangled thing called "asymmetric encryption". I'm afraid we're way off topic for c.l.js. However, as I see it, you'd have to deliver the *private* key to the client, which may not be the best idea, anyway. -- Christoph M. Becker