jcryption

Securely hide jQuery result from user?

↘锁芯ラ 提交于 2019-12-13 04:54:13
问题 Is it possible to generate a random number with jQuery, then post it to the server in a form without the user being able to find out the number? I know I can "hide" the output, but can I hide it from firebug too? Could it be done with something like jCryption, or is this actually impossible with jQuery? 回答1: Nothing you do on the client-side should ever be considered safe from the user's manipulation. 回答2: No. It is not possible. Every connection between the browser and the server can be

jCryption + CRAM are a good alternative to SSL?

别等时光非礼了梦想. 提交于 2019-12-05 07:03:01
问题 I would like to know if jCryption + Challenge Response Authentication Mechanism are a good alternative to SSL. I know that SSL is very much better, but I'm making a project where the owner don't want to buy a SSL certificate and, I would like to find a solution to give the best security approach that could be acquired without the use of SSL. Any ideas? 回答1: No, it's not. Just off the top of my head, I can think of many reasons: HTTP headers are still unencrypted, the key exchange is

jCryption + CRAM are a good alternative to SSL?

試著忘記壹切 提交于 2019-12-03 21:43:46
I would like to know if jCryption + Challenge Response Authentication Mechanism are a good alternative to SSL. I know that SSL is very much better, but I'm making a project where the owner don't want to buy a SSL certificate and, I would like to find a solution to give the best security approach that could be acquired without the use of SSL. Any ideas? No, it's not. Just off the top of my head, I can think of many reasons: HTTP headers are still unencrypted, the key exchange is vulnerable to man-in-the-middle attacks, and you're putting a high degree of trust in client-side code. Just use a