RE: [PHP] AES client side
| From: | Jay Blanchard | Date: | Mon, 31 Jul 2006 15:05:01 +0000 |
| Subject: | RE: [PHP] AES client side | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-239921@lists.php.net to get a copy of this message | ||
[snip]
Jay Blanchard wrote:
> This still leaves any Javascript exposed, doesn't it?
>
Yes, but that shouldn't matter. The algorithms for RSA, AES, etc, etc
are all publicly available, why bother hiding their JavaScript
implementations? Only the data would be encrypted.
[/snip]
So, you're suggesting that you can use Ajax or some other mechanism to
hide the key on the server?