> I took a look at the wikipedia, and sure enough, it says that > SSL also does hashing, thatââ¬â¢s good to know, I wish the > on-line course that I took had made that clear and not just > treated confidentiality and data integrity as two separate > items. It explained SSL, but never mentioned that it also > does hashing. Everyone, thank you for the education.
Well, confidentiality and data integrity are two separate items. However, TLS takes adequate care of both. As for hashing, TLS does that in very limited ways - basically, hashing some of the information used to create and define the secure connection. To the best of my knowledge, the actual data that your application uses is not hashed. But that's ok! Since the data needs to be decrypted on the receiver's end, there's no point in hashing it, since anyone capable of tampering with the data would also be capable of hashing that data and sending the hash along with the data to the server. Hashes as a substitute for data exchange only work if you already have the data on both ends of your connection, and compare the hash created by the data on your end to the hash received from the other end. Passwords are a good example of this - if you have the password data on the server, the client can send a hash of the data rather than the actual data; the server can then compare that hash to the hash it itself creates from the data. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Get the answers you are looking for on the ColdFusion Labs Forum direct from active programmers and developers. http://www.adobe.com/cfusion/webforums/forum/categories.cfm?forumid-72&catid=648 Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:286928 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
