Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #35328

Re: Submitting *encrypted* forms via AJAX

From "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid>
Newsgroups comp.lang.javascript
Subject Re: Submitting *encrypted* forms via AJAX
Date 2018-06-28 13:46 -0700
Organization n/a
Message-ID <ph3hf1$3jk$1@dont-email.me> (permalink)
References (6 earlier) <3824731.5j0TqHaiX3@PointedEars.de> <slrnpj74af.3q5.jon+usenet@sable.unequivocal.eu> <ph04hb$63c$1@solani.org> <ph0u5q$f48$1@dont-email.me> <ph2i8k$ned$2@solani.org>

Show all headers | View raw

On 6/28/2018 4:54 AM, Christoph M. Becker wrote:
> On 27.06.2018 at 23:04, Chris M. Thomasson wrote:
> 
>> On 6/27/2018 6:47 AM, Christoph M. Becker wrote:
>>
>>> On 27.06.2018 at 15:29, Jon Ribbens wrote:
>>>
>>>> You should look into this newfangled thing called "asymmetric
>>>> encryption".
>>>
>>> I'm afraid we're way off topic for c.l.js.  However, as I see it, you'd
>>> have to deliver the *private* key to the client, which may not be the
>>> best idea, anyway.
>>
>> No. In asymmetric key exchange the secret key is NEVER sent across the
>> wire. Instead the server and client generate the same secret key without
>> showing it to anybody. Take a deep look at something along the lines of:
>>
>> https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange
>>
>> See? There is no need to send the secret generated key across the wire.
> 
> Thanks.  I stand corrected.  Still, I can't see how this is actually
> related to the OP.
> 

Sorry about that. I just pointed out a way where a server and client can 
create a secret key without exposing it to Eve.

Now, the primes that the client and server use should be hard to bust 
wrt the public data sent across the wire for any asymmetric key 
exchange. This can be a problem.

Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Submitting *encrypted* forms via AJAX bit-naughty@hotmail.com - 2018-06-25 02:48 -0700
  Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-25 22:03 +0700
    Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-25 17:21 +0200
      Re: Submitting *encrypted* forms via AJAX JJ <jj4public@vfemail.net> - 2018-06-26 14:59 +0700
        Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-26 16:47 +0200
          Re: Submitting *encrypted* forms via AJAX Richard Damon <Richard@Damon-Family.org> - 2018-06-26 21:09 -0400
            Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-06-27 09:45 +0200
              Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 00:54 -0700
              Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-27 13:29 +0000
                Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-27 15:47 +0200
                Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-27 16:00 +0100
                Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 08:11 -0700
                Re: Submitting *encrypted* forms via AJAX Ben Bacarisse <ben.usenet@bsb.me.uk> - 2018-06-28 01:53 +0100
                Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-27 21:48 -0700
                Re: Submitting *encrypted* forms via AJAX Jon Ribbens <jon+usenet@unequivocal.eu> - 2018-06-28 09:17 +0000
                Re: Submitting *encrypted* forms via AJAX Julio Di Egidio <julio@diegidio.name> - 2018-06-28 03:25 -0700
                Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-27 14:04 -0700
                Re: Submitting *encrypted* forms via AJAX "Christoph M. Becker" <cmbecker69@arcor.de> - 2018-06-28 13:54 +0200
                Re: Submitting *encrypted* forms via AJAX "Chris M. Thomasson" <invalid_chris_thomasson@invalid.invalid> - 2018-06-28 13:46 -0700
  Re: Submitting *encrypted* forms via AJAX jecxjo <jeff@sh0.xyz> - 2018-07-02 03:21 +0000
    Re: Submitting *encrypted* forms via AJAX Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2018-07-15 04:56 +0200
      Re: Submitting *encrypted* forms via AJAX "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2018-07-16 01:00 +0200

csiph-web