Path: csiph.com!feeder.erje.net!1.eu.feeder.erje.net!weretis.net!feeder4.news.weretis.net!feeder5.news.weretis.net!news.solani.org!.POSTED!not-for-mail From: "Christoph M. Becker" Newsgroups: comp.lang.javascript Subject: Re: Submitting *encrypted* forms via AJAX Date: Thu, 28 Jun 2018 13:54:03 +0200 Organization: solani.org Lines: 26 Message-ID: References: <075dc3b9-1b96-4bc9-9d88-a79ee815e8e2@googlegroups.com> <1ayv347oigack.t9kcyjsxesx9$.dlg@40tude.net> <5696879.fPQVyQoktA@PointedEars.de> <3824731.5j0TqHaiX3@PointedEars.de> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: solani.org 1530186836 24013 127.0.0.43 (28 Jun 2018 11:53:56 GMT) X-Complaints-To: abuse@news.solani.org NNTP-Posting-Date: Thu, 28 Jun 2018 11:53:56 +0000 (UTC) User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 X-User-ID: eJwNysEBwCAIA8CVKgmpjCNQ9h/B3vscWqqXctHHJzqbDDPMQ8BRaXtTH1MZtepoIcfQf9g6FxAjEMo= In-Reply-To: Cancel-Lock: sha1:h0Q9hRRDuY0gTW3KwzXeZWul6YU= Content-Language: de-DE Xref: csiph.com comp.lang.javascript:35327 On 27.06.2018 at 23:04, Chris M. Thomasson wrote: > On 6/27/2018 6:47 AM, Christoph M. Becker wrote: > >> On 27.06.2018 at 15:29, Jon Ribbens wrote: >> >>> You should look into this newfangled thing called "asymmetric >>> encryption". >> >> I'm afraid we're way off topic for c.l.js.  However, as I see it, you'd >> have to deliver the *private* key to the client, which may not be the >> best idea, anyway. > > No. In asymmetric key exchange the secret key is NEVER sent across the > wire. Instead the server and client generate the same secret key without > showing it to anybody. Take a deep look at something along the lines of: > > https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange > > See? There is no need to send the secret generated key across the wire. Thanks. I stand corrected. Still, I can't see how this is actually related to the OP. -- Christoph M. Becker