Re: converted seed value?

This WebDNA talk-list message is from

1998


It keeps the original formatting.
numero = 18872
interpreted = N
texte = >Oh, I don't have a serious problem. In fact the customer is scared about >some rather hysterical mails on a Windoes mailing list, stopped developing >his beloved asp project and asked us for a WebCat solution (yes!). >But now he wants to encrypt everything.Gotcha. If you set .db suffix mapping to WebCatalog, and don't install any other security-hole software on your server, you can be sure no one can download those files.>I looked into WebCat encryption and >showed him the system. Of course, he saw the seed value in clear text and >became again uncertain. I had the idea to take his fear away by doing >something like >[encrypt seed=[convertchars db=enc.db]seedvalue[/convertchars]This does not solve the problem, because a hacker would just go look at the enc.db file.If your situation could work with trapdoor encryption, then you can use the technique that we use for Users.dbTechnical Support | ==== eCommerce and Beyond ==== Pacific Coast Software | WebCatalog, WebMerchant, 11770 Bernardo Plaza Court | SiteEdit Pro, PhotoMaster, San Diego, CA 92128 | Typhoon 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: converted seed value? (PCS Technical Support 1998)
  2. Re: converted seed value? (Peter Ostry 1998)
  3. Re: converted seed value? (Kenneth Grome 1998)
  4. Re: converted seed value? (PCS Technical Support 1998)
  5. converted seed value? (Peter Ostry 1998)
>Oh, I don't have a serious problem. In fact the customer is scared about >some rather hysterical mails on a Windoes mailing list, stopped developing >his beloved asp project and asked us for a WebCat solution (yes!). >But now he wants to encrypt everything.Gotcha. If you set .db suffix mapping to WebCatalog, and don't install any other security-hole software on your server, you can be sure no one can download those files.>I looked into WebCat encryption and >showed him the system. Of course, he saw the seed value in clear text and >became again uncertain. I had the idea to take his fear away by doing >something like >[encrypt seed=[convertchars db=enc.db]seedvalue[/convertchars]This does not solve the problem, because a hacker would just go look at the enc.db file.If your situation could work with trapdoor encryption, then you can use the technique that we use for Users.dbTechnical Support | ==== eCommerce and Beyond ==== Pacific Coast Software | WebCatalog, WebMerchant, 11770 Bernardo Plaza Court | SiteEdit Pro, PhotoMaster, San Diego, CA 92128 | Typhoon 619/675-1106 Fax: 619/675-0372 | http://www.smithmicro.com/ PCS Technical Support

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Math with Time (1997) Various Problems (1997) [WebDNA] Contact Management Code (2012) RE: WebCatalog2 for NT Beta Request (1997) Error Lob.db records error message not name (1997) Its slow.... (2004) Shell traceroute (2001) Help! WebCat2 bug (1997) [WebDNA] Connect to MS SQL (2013) NT Version on IIS 4.0 (1997) question: webmerchant connection (1997) OSX 10.2.6/iTools 7.0/WebDNA 5.0 installation (2003) too many nested tags ... (1997) ShowIf variables (1997) Sort of a Dilemma! (1998) [WebDNA] OT - does anyone know how to get Fetch/BBedit to (2009) Protect (1997) Online CC Processing (2002) two unique banners on one page (1997) need help please (1997)