Monday, November 1, 2010

Re: Howto crypt forms in Django?

> is there a way not to send form data in plain-text format? I've found
> jCryption for PHP ("In short words jCryption is a javascript HTML-Form
> encryption plugin, which encrypts the POST/GET-Data that will be sent
> when you submit a form."). Is there a way to crypt data without using
> SSL?

Christian,

any solution similar to jCryption would not add much security to
your forms. Since it does not use challenge-response, anyone who could
obtain the plain-text form data can now obtain encrypted data and the
encryption keys (and the fact that you'd be using something like
jCryption). So, not much security added, only a bit of obfuscation.

So, you should use SSL if you worry about security. Sorry.

Cheers

Jirka

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To post to this group, send email to django-users@googlegroups.com.
To unsubscribe from this group, send email to django-users+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/django-users?hl=en.

No comments:

Post a Comment