Re: encrypt method=APOP broken or just not enough docs? - was:MD5 encryption

This WebDNA talk-list message is from

2003


It keeps the original formatting.
numero = 47387
interpreted = N
texte = Scott,OK, fair enough. APOP looked enticing because the encrypted value was all lower ascii and SHORTER than the input string (both desirable traits when compared to the default encryption). I didn't even know that the APOP method existed until earlier today when I looked over the encrypt docs.Upon further reading, the docs imply that Cybercash can't be used for round trip encrypt/decrypt either:decrypt - seed - For CyberCash, this should be the MerchantKey you were assigned when you created a CyberCash merchant account [...] CyberCash decryption only works with text sent from the CyberCash CashRegister server to you; it cannot be used to decrypt text that was encrypted by WebDNA itself.So if we want to encrypt and decrypt data locally, we will need to use either the built-in encryption or the base64 method for encoding-but-no-encryption.I'm just trying to find the simplest/shortest way to save a URL in a cookie without it breaking or containing 100 miles of url'd characters after being encrypted and double-url'd... Since I'm not protecting critical data, it looks like the winner is:[SETCOOKIE name=mycookie&value=[encrypt method=base64][refr][/encrypt]&path=/&domain=.mydomain.com]Something else that took a while to track down today: Don't include & in cookie data unless you url the input twice (or use base64 encoding instead of url).Thanks,Dale>APOP is not a valid method for the [decrypt] context. If you need to >encrypt and decrypt data then use either 'CyberCash' or the built-in WebDNA >method (not using the method= parameter).------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: encrypt method=APOP broken or just not enough docs? - was:MD5 encryption (Brian Fries 2003)
  2. Re: encrypt method=APOP broken or just not enough docs? - was:MD5 encryption (Dale LaFountain 2003)
Scott,OK, fair enough. APOP looked enticing because the encrypted value was all lower ascii and SHORTER than the input string (both desirable traits when compared to the default encryption). I didn't even know that the APOP method existed until earlier today when I looked over the encrypt docs.Upon further reading, the docs imply that Cybercash can't be used for round trip encrypt/decrypt either:decrypt - seed - For CyberCash, this should be the MerchantKey you were assigned when you created a CyberCash merchant account [...] CyberCash decryption only works with text sent from the CyberCash CashRegister server to you; it cannot be used to decrypt text that was encrypted by WebDNA itself.So if we want to encrypt and decrypt data locally, we will need to use either the built-in encryption or the base64 method for encoding-but-no-encryption.I'm just trying to find the simplest/shortest way to save a URL in a cookie without it breaking or containing 100 miles of url'd characters after being encrypted and double-url'd... Since I'm not protecting critical data, it looks like the winner is:[SETCOOKIE name=mycookie&value=[encrypt method=base64][refr][/encrypt]&path=/&domain=.mydomain.com]Something else that took a while to track down today: Don't include & in cookie data unless you url the input twice (or use base64 encoding instead of url).Thanks,Dale>APOP is not a valid method for the [decrypt] context. If you need to >encrypt and decrypt data then use either 'CyberCash' or the built-in WebDNA >method (not using the method= parameter).------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Dale LaFountain

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Help! WebCat2 bug (1997) WebTen Type 2 Crash on start (2000) RAM variables (1997) WCS Newbie question (1997) Database Options (1997) [defined]ish (1997) Sorting Orders (1997) WebDNA 6.x - Compatibility with Fedora release 1? (2004) Rumpus/Typhoon modules included in Typhoon ... (1997) Adding time above 24 hours (2002) [ModDate] & [ModTime] ? (1997) Re:quit command on NT (1997) WebStar Secure on other machine (1997) Triggers (2001) WebCat2 - Getting to the browser's username/password data (1997) WebCatalog/Mac 2.1b2 - PIXO (1997) Setting up WebCatalog with Retail Pro data (1996) Re1000001: Setting up shop (1997) WebCatalog NT beta 18 problem (1997) WebCatalog for guestbook ? (1997)