Re: encrypt method=APOP broken or just not enough docs? - was:MD5 encryption
This WebDNA talk-list message is from 2003
It keeps the original formatting.
numero = 47387
interpreted = N
texte = Scott,OK, fair enough. APOP looked enticing because the encrypted value was all lower ascii and SHORTER than the input string (both desirable traits when compared to the default encryption). I didn't even know that the APOP method existed until earlier today when I looked over the encrypt docs.Upon further reading, the docs imply that Cybercash can't be used for round trip encrypt/decrypt either:decrypt - seed - For CyberCash, this should be the MerchantKey you were assigned when you created a CyberCash merchant account [...] CyberCash decryption only works with text sent from the CyberCash CashRegister server to you; it cannot be used to decrypt text that was encrypted by WebDNA itself.So if we want to encrypt and decrypt data locally, we will need to use either the built-in encryption or the base64 method for encoding-but-no-encryption.I'm just trying to find the simplest/shortest way to save a URL in a cookie without it breaking or containing 100 miles of url'd characters after being encrypted and double-url'd... Since I'm not protecting critical data, it looks like the winner is:[SETCOOKIE name=mycookie&value=[encrypt method=base64][refr][/encrypt]&path=/&domain=.mydomain.com]Something else that took a while to track down today: Don't include & in cookie data unless you url the input twice (or use base64 encoding instead of url).Thanks,Dale>APOP is not a valid method for the [decrypt] context. If you need to>encrypt and decrypt data then use either 'CyberCash' or the built-in WebDNA>method (not using the method= parameter).-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list
.To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Scott,OK, fair enough. APOP looked enticing because the encrypted value was all lower ascii and SHORTER than the input string (both desirable traits when compared to the default encryption). I didn't even know that the APOP method existed until earlier today when I looked over the encrypt docs.Upon further reading, the docs imply that Cybercash can't be used for round trip encrypt/decrypt either:decrypt - seed - For CyberCash, this should be the MerchantKey you were assigned when you created a CyberCash merchant account [...] CyberCash decryption only works with text sent from the CyberCash CashRegister server to you; it cannot be used to decrypt text that was encrypted by WebDNA itself.So if we want to encrypt and decrypt data locally, we will need to use either the built-in encryption or the base64 method for encoding-but-no-encryption.I'm just trying to find the simplest/shortest way to save a URL in a cookie without it breaking or containing 100 miles of url'd characters after being encrypted and double-url'd... Since I'm not protecting critical data, it looks like the winner is:[SETCOOKIE name=mycookie&value=[encrypt method=base64][refr][/encrypt]&path=/&domain=.mydomain.com]Something else that took a while to track down today: Don't include & in cookie data unless you url the input twice (or use base64 encoding instead of url).Thanks,Dale>APOP is not a valid method for the [decrypt] context. If you need to>encrypt and decrypt data then use either 'CyberCash' or the built-in WebDNA>method (not using the method= parameter).-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Dale LaFountain
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Help! WebCat2 bug (1997)
WebTen Type 2 Crash on start (2000)
RAM variables (1997)
WCS Newbie question (1997)
Database Options (1997)
[defined]ish (1997)
Sorting Orders (1997)
WebDNA 6.x - Compatibility with Fedora release 1? (2004)
Rumpus/Typhoon modules included in Typhoon ... (1997)
Adding time above 24 hours (2002)
[ModDate] & [ModTime] ? (1997)
Re:quit command on NT (1997)
WebStar Secure on other machine (1997)
Triggers (2001)
WebCat2 - Getting to the browser's username/password data (1997)
WebCatalog/Mac 2.1b2 - PIXO (1997)
Setting up WebCatalog with Retail Pro data (1996)
Re1000001: Setting up shop (1997)
WebCatalog NT beta 18 problem (1997)
WebCatalog for guestbook ? (1997)