Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "J.O. Aho" Newsgroups: comp.lang.php Subject: Re: HTTPS data in a form Date: Fri, 16 Sep 2016 07:52:32 +0200 Lines: 29 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Trace: individual.net gyhayElCY93tJmdBxnqvCgLgKq8gfxUVqVlUqcstMcVpRka/Ko Cancel-Lock: sha1:KaZKh56lEJDzKOCrK6DmTg2d4ko= X-Enigmail-Draft-Status: N1110 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 In-Reply-To: Xref: csiph.com comp.lang.php:17055 On 09/16/2016 06:45 AM, bit-naughty@hotmail.com wrote: > If I have a form where there's a username and a password, and I'd like only the *password* > to be encrypted before being sent to the server, NOT the username, how do I code the form HTML? You need to use javascrip, which is off topic in the user group. > I'm not really clear about HTTPS - if whatever it is is encrypted, then how is it decrypted later? Encryption and decryption is done in the transport layer, your php will not need any changes regards how it receives the post/get data. You can read a short description in the following forum thread: http://security.stackexchange.com/questions/20803/how-does-ssl-tls-work > Like, if my mail is being viewed over a HTTPS connection, then there must be a way to decrypt it, > right, otherwise I wouldn't be able to see it....? What is it that's stored on the server side exactly? Most mail servers will have the mail in plain text stored on the system storage, regardless if the partition where the mail is located is encrypted or not (encrypted partitions will only be unreadable when the data is in rest, not mounted). If you use PGP, then your mail may be encrypted and will be only decrypted when you read it in your mail client. -- //Aho