How can I encrypted data sent across my website from web forms without using
SSL?
Such as on Login the user enter "EmailAddress" & "Password" and Simply
Registration Form
in which the user creates a Password, FirstName, LastName, etc.
I see site like Careerbuilder and Monster allow user to register, login, and
retrieve a lost password
without using a SSL connection "I Know anytime you deal with credit card
info you need a SSL.
Thanks! 5 1368
Hi,
I'm not sure you can without using an ActiveX control. If you login to
Monster and use a network sniffer you can see that Monster isn't using any
encryption. It is simply sending your credentials over in clear text. Good
luck! Ken.
--
Ken Dopierala Jr.
For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.
"Leon" <vn*****@msn.com> wrote in message
news:%2******************@TK2MSFTNGP12.phx.gbl... How can I encrypted data sent across my website from web forms without
using SSL? Such as on Login the user enter "EmailAddress" & "Password" and Simply Registration Form in which the user creates a Password, FirstName, LastName, etc. I see site like Careerbuilder and Monster allow user to register, login,
and retrieve a lost password without using a SSL connection "I Know anytime you deal with credit card info you need a SSL. Thanks!
Hi,
As a follow up here is something you could use: http://javascript.internet.com/passw...ncryption.html
While you are still submiting in clear text will take a hacker a little work
to get the user name and password. However, once he goes to your site
himself, gets the javascript code he could still very easily crack your
passwords. Good luck! Ken.
--
Ken Dopierala Jr.
For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.
"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:%2****************@TK2MSFTNGP09.phx.gbl... Hi,
I'm not sure you can without using an ActiveX control. If you login to Monster and use a network sniffer you can see that Monster isn't using any encryption. It is simply sending your credentials over in clear text.
Good luck! Ken.
-- Ken Dopierala Jr. For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight If you sign up under me and need help, email me.
"Leon" <vn*****@msn.com> wrote in message news:%2******************@TK2MSFTNGP12.phx.gbl... How can I encrypted data sent across my website from web forms without using SSL? Such as on Login the user enter "EmailAddress" & "Password" and Simply Registration Form in which the user creates a Password, FirstName, LastName, etc. I see site like Careerbuilder and Monster allow user to register, login, and retrieve a lost password without using a SSL connection "I Know anytime you deal with credit card info you need a SSL. Thanks!
thanks!
"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:eK****************@TK2MSFTNGP12.phx.gbl... Hi,
As a follow up here is something you could use:
http://javascript.internet.com/passw...ncryption.html
While you are still submiting in clear text will take a hacker a little work to get the user name and password. However, once he goes to your site himself, gets the javascript code he could still very easily crack your passwords. Good luck! Ken.
-- Ken Dopierala Jr. For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight If you sign up under me and need help, email me.
"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message news:%2****************@TK2MSFTNGP09.phx.gbl... Hi,
I'm not sure you can without using an ActiveX control. If you login to Monster and use a network sniffer you can see that Monster isn't using any encryption. It is simply sending your credentials over in clear text. Good luck! Ken.
-- Ken Dopierala Jr. For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight If you sign up under me and need help, email me.
"Leon" <vn*****@msn.com> wrote in message news:%2******************@TK2MSFTNGP12.phx.gbl... > How can I encrypted data sent across my website from web forms without using > SSL? > Such as on Login the user enter "EmailAddress" & "Password" and Simply > Registration Form > in which the user creates a Password, FirstName, LastName, etc. > I see site like Careerbuilder and Monster allow user to register, > login, and > retrieve a lost password > without using a SSL connection "I Know anytime you deal with credit > card > info you need a SSL. > Thanks! > >
You were right with your first reply. Using JavaScript to encrypt data is
NOT secure. There is no such thing as "sort of" secure. If he needs to
encrypt data, it needs to be secure. If it isn't secure, it isn't secure.
period.
--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
I get paid good money to
solve puzzles for a living
"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:eK**************@TK2MSFTNGP12.phx.gbl... Hi,
As a follow up here is something you could use:
http://javascript.internet.com/passw...ncryption.html
While you are still submiting in clear text will take a hacker a little
work to get the user name and password. However, once he goes to your site himself, gets the javascript code he could still very easily crack your passwords. Good luck! Ken.
-- Ken Dopierala Jr. For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight If you sign up under me and need help, email me.
"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message news:%2****************@TK2MSFTNGP09.phx.gbl... Hi,
I'm not sure you can without using an ActiveX control. If you login to Monster and use a network sniffer you can see that Monster isn't using
any encryption. It is simply sending your credentials over in clear text. Good luck! Ken.
-- Ken Dopierala Jr. For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight If you sign up under me and need help, email me.
"Leon" <vn*****@msn.com> wrote in message news:%2******************@TK2MSFTNGP12.phx.gbl... How can I encrypted data sent across my website from web forms without using SSL? Such as on Login the user enter "EmailAddress" & "Password" and Simply Registration Form in which the user creates a Password, FirstName, LastName, etc. I see site like Careerbuilder and Monster allow user to register,
login, and retrieve a lost password without using a SSL connection "I Know anytime you deal with credit
card info you need a SSL. Thanks!
If it could help you: I once wrote a Java applet that does asymmetric
encryption just like SSL
Let me know if interested, wx************@hxotmail.cxom (remove the x'ses)
"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:%2****************@TK2MSFTNGP09.phx.gbl... Hi,
I'm not sure you can without using an ActiveX control. If you login to Monster and use a network sniffer you can see that Monster isn't using any encryption. It is simply sending your credentials over in clear text. Good luck! Ken.
-- Ken Dopierala Jr. For great ASP.Net web hosting try: http://www.webhost4life.com/default.asp?refid=Spinlight If you sign up under me and need help, email me.
"Leon" <vn*****@msn.com> wrote in message news:%2******************@TK2MSFTNGP12.phx.gbl... How can I encrypted data sent across my website from web forms without using SSL? Such as on Login the user enter "EmailAddress" & "Password" and Simply Registration Form in which the user creates a Password, FirstName, LastName, etc. I see site like Careerbuilder and Monster allow user to register, login, and retrieve a lost password without using a SSL connection "I Know anytime you deal with credit card info you need a SSL. Thanks!
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: John |
last post by:
I have read somewhere else in this newsgroup that the way to avoid the
message (Warning: Page has Expired blah, blah blah ... ) when one
presses the back button is to place the statement...
|
by: David Aldred |
last post by:
Got a bit of code, which I want to loop through, unless the current value is
"", in which case I need ti to skip to the next one, but how do I do it?
Response.Write "<br />" & vbCrLf
For Each...
|
by: Ken |
last post by:
I have a win 2000 database of autographs and scanned photos. They are
in the SAME directory. In the table, my "ImagePath" text field shows
JUST the image name (i.e. "blank.jpg"). I have an image...
|
by: Susan Bricker |
last post by:
I am currently using the OnDirty event of a Form to detect whether any
fields have been modified. I set a boolean variable. Then, if the
Close button is clicked before the Save button, I can put...
|
by: morangolds |
last post by:
Hi,
I've been having a problem with C++ Windows Forms apps not "ending"
when you close the form window. I've searched about this problem all
over the place and most searches have lead me to...
|
by: keychain |
last post by:
I'm experience the infamous "SSL: Fatal Protocol Error" bug with Apache 2.x
According the fopen() documentation:
"If you are using fsockopen() to create an ssl:// socket, you are
responsible...
|
by: KiwiGenie |
last post by:
Hi..I am trying to make a search form. I am fairly new to access and could well be looking at it completely wrong. I have an unbound form with textboxes in the header for entering different search...
|
by: cindy2 |
last post by:
Hi,
Something strange happens when I run my vb2005-project. The startup form (form1) displays normally at first instance. After that you can show a dialog(form2) with a button_click. When you...
|
by: Tom |
last post by:
Can someone please explain the non-working aspect of binding to Width?
See code below.
Thanks !!
-- Tom
===================================================
using System;
using...
|
by: taylorcarr |
last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
|
by: Charles Arthur |
last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
|
by: ryjfgjl |
last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
|
by: emmanuelkatto |
last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud.
Please let me know.
Thanks!
Emmanuel
|
by: nemocccc |
last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
|
by: Sonnysonu |
last post by:
This is the data of csv file
1 2 3
1 2 3
1 2 3
1 2 3
2 3
2 3
3
the lengths should be different i have to store the data by column-wise with in the specific length.
suppose the i have to...
|
by: Hystou |
last post by:
There are some requirements for setting up RAID:
1. The motherboard and BIOS support RAID configuration.
2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers,...
| |