473,385 Members | 1,707 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,385 software developers and data experts.

Another form of encryption "Not SSL"?

How can I encrypted data sent across my website from web forms without using
SSL?
Such as on Login the user enter "EmailAddress" & "Password" and Simply
Registration Form
in which the user creates a Password, FirstName, LastName, etc.
I see site like Careerbuilder and Monster allow user to register, login, and
retrieve a lost password
without using a SSL connection "I Know anytime you deal with credit card
info you need a SSL.
Thanks!
Nov 18 '05 #1
5 1368
Hi,

I'm not sure you can without using an ActiveX control. If you login to
Monster and use a network sniffer you can see that Monster isn't using any
encryption. It is simply sending your credentials over in clear text. Good
luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Leon" <vn*****@msn.com> wrote in message
news:%2******************@TK2MSFTNGP12.phx.gbl...
How can I encrypted data sent across my website from web forms without using SSL?
Such as on Login the user enter "EmailAddress" & "Password" and Simply
Registration Form
in which the user creates a Password, FirstName, LastName, etc.
I see site like Careerbuilder and Monster allow user to register, login, and retrieve a lost password
without using a SSL connection "I Know anytime you deal with credit card
info you need a SSL.
Thanks!

Nov 18 '05 #2
Hi,

As a follow up here is something you could use:

http://javascript.internet.com/passw...ncryption.html

While you are still submiting in clear text will take a hacker a little work
to get the user name and password. However, once he goes to your site
himself, gets the javascript code he could still very easily crack your
passwords. Good luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:%2****************@TK2MSFTNGP09.phx.gbl...
Hi,

I'm not sure you can without using an ActiveX control. If you login to
Monster and use a network sniffer you can see that Monster isn't using any
encryption. It is simply sending your credentials over in clear text. Good luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Leon" <vn*****@msn.com> wrote in message
news:%2******************@TK2MSFTNGP12.phx.gbl...
How can I encrypted data sent across my website from web forms without

using
SSL?
Such as on Login the user enter "EmailAddress" & "Password" and Simply
Registration Form
in which the user creates a Password, FirstName, LastName, etc.
I see site like Careerbuilder and Monster allow user to register, login,

and
retrieve a lost password
without using a SSL connection "I Know anytime you deal with credit card
info you need a SSL.
Thanks!


Nov 18 '05 #3
thanks!

"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:eK****************@TK2MSFTNGP12.phx.gbl...
Hi,

As a follow up here is something you could use:

http://javascript.internet.com/passw...ncryption.html

While you are still submiting in clear text will take a hacker a little
work
to get the user name and password. However, once he goes to your site
himself, gets the javascript code he could still very easily crack your
passwords. Good luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:%2****************@TK2MSFTNGP09.phx.gbl...
Hi,

I'm not sure you can without using an ActiveX control. If you login to
Monster and use a network sniffer you can see that Monster isn't using
any
encryption. It is simply sending your credentials over in clear text.

Good
luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Leon" <vn*****@msn.com> wrote in message
news:%2******************@TK2MSFTNGP12.phx.gbl...
> How can I encrypted data sent across my website from web forms without

using
> SSL?
> Such as on Login the user enter "EmailAddress" & "Password" and Simply
> Registration Form
> in which the user creates a Password, FirstName, LastName, etc.
> I see site like Careerbuilder and Monster allow user to register,
> login,

and
> retrieve a lost password
> without using a SSL connection "I Know anytime you deal with credit
> card
> info you need a SSL.
> Thanks!
>
>



Nov 18 '05 #4
You were right with your first reply. Using JavaScript to encrypt data is
NOT secure. There is no such thing as "sort of" secure. If he needs to
encrypt data, it needs to be secure. If it isn't secure, it isn't secure.
period.

--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
I get paid good money to
solve puzzles for a living

"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:eK**************@TK2MSFTNGP12.phx.gbl...
Hi,

As a follow up here is something you could use:

http://javascript.internet.com/passw...ncryption.html

While you are still submiting in clear text will take a hacker a little work to get the user name and password. However, once he goes to your site
himself, gets the javascript code he could still very easily crack your
passwords. Good luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:%2****************@TK2MSFTNGP09.phx.gbl...
Hi,

I'm not sure you can without using an ActiveX control. If you login to
Monster and use a network sniffer you can see that Monster isn't using any encryption. It is simply sending your credentials over in clear text.

Good
luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Leon" <vn*****@msn.com> wrote in message
news:%2******************@TK2MSFTNGP12.phx.gbl...
How can I encrypted data sent across my website from web forms without

using
SSL?
Such as on Login the user enter "EmailAddress" & "Password" and Simply
Registration Form
in which the user creates a Password, FirstName, LastName, etc.
I see site like Careerbuilder and Monster allow user to register, login,
and
retrieve a lost password
without using a SSL connection "I Know anytime you deal with credit

card info you need a SSL.
Thanks!



Nov 18 '05 #5
wl
If it could help you: I once wrote a Java applet that does asymmetric
encryption just like SSL

Let me know if interested,

wx************@hxotmail.cxom (remove the x'ses)
"Ken Dopierala Jr." <kd*********@wi.rr.com> wrote in message
news:%2****************@TK2MSFTNGP09.phx.gbl...
Hi,

I'm not sure you can without using an ActiveX control. If you login to
Monster and use a network sniffer you can see that Monster isn't using any
encryption. It is simply sending your credentials over in clear text.
Good
luck! Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Leon" <vn*****@msn.com> wrote in message
news:%2******************@TK2MSFTNGP12.phx.gbl...
How can I encrypted data sent across my website from web forms without

using
SSL?
Such as on Login the user enter "EmailAddress" & "Password" and Simply
Registration Form
in which the user creates a Password, FirstName, LastName, etc.
I see site like Careerbuilder and Monster allow user to register, login,

and
retrieve a lost password
without using a SSL connection "I Know anytime you deal with credit card
info you need a SSL.
Thanks!


Nov 18 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
by: John | last post by:
I have read somewhere else in this newsgroup that the way to avoid the message (Warning: Page has Expired blah, blah blah ... ) when one presses the back button is to place the statement...
1
by: David Aldred | last post by:
Got a bit of code, which I want to loop through, unless the current value is "", in which case I need ti to skip to the next one, but how do I do it? Response.Write "<br />" & vbCrLf For Each...
3
by: Ken | last post by:
I have a win 2000 database of autographs and scanned photos. They are in the SAME directory. In the table, my "ImagePath" text field shows JUST the image name (i.e. "blank.jpg"). I have an image...
9
by: Susan Bricker | last post by:
I am currently using the OnDirty event of a Form to detect whether any fields have been modified. I set a boolean variable. Then, if the Close button is clicked before the Save button, I can put...
10
by: morangolds | last post by:
Hi, I've been having a problem with C++ Windows Forms apps not "ending" when you close the form window. I've searched about this problem all over the place and most searches have lead me to...
4
by: keychain | last post by:
I'm experience the infamous "SSL: Fatal Protocol Error" bug with Apache 2.x According the fopen() documentation: "If you are using fsockopen() to create an ssl:// socket, you are responsible...
6
by: KiwiGenie | last post by:
Hi..I am trying to make a search form. I am fairly new to access and could well be looking at it completely wrong. I have an unbound form with textboxes in the header for entering different search...
4
cindy2
by: cindy2 | last post by:
Hi, Something strange happens when I run my vb2005-project. The startup form (form1) displays normally at first instance. After that you can show a dialog(form2) with a button_click. When you...
3
by: Tom | last post by:
Can someone please explain the non-working aspect of binding to Width? See code below. Thanks !! -- Tom =================================================== using System; using...
0
by: taylorcarr | last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.