Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #35303 > unrolled thread

Submitting *encrypted* forms via AJAX

Back to article view | Back to comp.lang.javascript

Contents

  Submitting *encrypted* forms via AJAX bit-naughty@hotmail.com - 2018-06-25 02:48 -0700
    Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-25 22:03 +0700
      Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-25 17:21 +0200
        Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-26 14:59 +0700
          Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-26 16:47 +0200
            Re: Submitting *encrypted* forms via AJAX Richard Damon <Richard@Damon-Family.org> - 2018-06-26 21:09 -0400
              Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-27 09:45 +0200
                Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 00:54 -0700
                Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-27 13:29 +0000
                  Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-27 15:47 +0200
                    Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-27 16:00 +0100
                      Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 08:11 -0700
                        Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-28 01:53 +0100
                          Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 21:48 -0700
                          Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-28 09:17 +0000
                            Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-28 03:25 -0700
                    Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 14:04 -0700
                      Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-28 13:54 +0200
                        Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-28 13:46 -0700
    Re: Submitting *encrypted* forms via AJAX jecxjo <jeff@sh0.xyz> - 2018-07-02 03:21 +0000
      Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-07-15 04:56 +0200
        Re: Submitting *encrypted* forms via AJAX "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2018-07-16 01:00 +0200

Page 2 of 2 — ← Prev page 1 [2]

#35429

jecxjo wrote:
> Not sure why the other responses went so off topic and into arguments...

Because there are some people here who actually know what they are doing.

> It's generally assumed that if you are looking to perform secure
>  communications you would use HTTPS. Standards groups pick the best
>  algorithms for the job, browsers use and test commonly used ssl/tls
>  libraries so you can trust the implementation of secure communications as
>  much as one can.

You don’t say.

> As for the for the commonly repeated quote "you can't do encryption in
>  Javascript"

There is no “Javascript”.  That you think there is, marks you as a wannabe.

If you would be able to read comprehensively, you would have found out that
nobody here claimed what you claim has been claimed.  That is, you *can* do
encryption *in* _JavaScript_ (as opposed to *with* JavaScript), but you
SHOULD NOT *for this purpose* if the script is *client*-side.

> the issue is about authenticating the source of a message.

No, the issue is about whether the encryption key is known to a potential
attacker.

> So what reasons might you still want to encrypt form data in JS? If you want
>  the destination of that data to not know what it is. Often sites that store
>  data that is only used client side will encrypt it before sending it to the
>  server for storage. This way if the server is compromised your data won't
>  be.

Utter nonsense.


PointedEars
-- 
Anyone who slaps a 'this page is best viewed with Browser X' label on
a Web page appears to be yearning for the bad old days, before the Web,
when you had very little chance of reading a document written on another
computer, another word processor, or another network. -- Tim Berners-Lee

[toc] | [prev] | [next] | [standalone]

#35431

Thomas 'PointedEars' wrote on 15 Jul 2018 in comp.lang.javascript:
> jecxjo wrote:
>> As for the for the commonly repeated quote "you can't do encryption in
>>  Javascript"

Even so, one can do encryption just as good in Javascript as in any other 
language, provided you can keep the key or keys out of reach.

> There is no "Javascript". 

There is no God.

-- 
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.lang.javascript

csiph-web