Re: AES client side
| From: | Jon Anderson | Date: | Mon, 31 Jul 2006 09:43:36 +0000 |
| Subject: | Re: AES client side | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-239913@lists.php.net to get a copy of this message | ||
Andrei wrote:
Then get a SSL certificate and let the browser do the job. If you do it with JavaScript or open-code language why shouldn't I just take your code and sniff the data you/the browser sends and decrypt it. Just playing devil's advocate here...But I believe that if implemented properly, encryption/decryption on the client could be secure, for example a diffie-hellman key exchange with AJAX, followed by encryption.jon