My esteemed colleague just informed me that you are all talking about
CFENCRYPTing entire applications, not strings.  I agree with all of you on
that matter - I personally have the C++ that runs the decryption algorythm
(as I'm sure most of you do)!

Sorry to waste time :)

                                                    
Bryan Love ACP
Internet Application Developer
[EMAIL PROTECTED]
                                                    


-----Original Message-----
From: Bryan Love [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 23, 2001 5:17 PM
To: CF-Talk
Subject: RE: encryption question


This is taken directly from the help inside CF Studio:

------------------------------
Syntax
Encrypt(string, key)

string
String to be encrypted.

key
String specifying the key used to encrypt string.
.....

------------------------------

the string is encrypted on the provided key value.  Is this what you meant?

                                                    
Bryan Love ACP
Internet Application Developer
[EMAIL PROTECTED]
                                                    


-----Original Message-----
From: Philip Arnold - ASP [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 23, 2001 4:37 PM
To: CF-Talk
Subject: RE: encryption question


> pardon my ignorance, but isn't the encryption method for ALL publicly
> available encryption techniques known?

The style maybe known, but the one used for CFEncrypt isn't particularly
difficult to decrypt - thus if someone can get to your site and knows your
using CF, then they'll try the description method and amazingly get at your
data

The better method is to use a non-CFEncrypt method on CF sites and thus
increase the difficulty

What would be nicer if CFEncrypt asked for a key value and then encrypted
the data on that, rather than just "We'll encrypt it using DES"

Philip Arnold
Director
Certified ColdFusion Developer
ASP Multimedia Limited
T: +44 (0)20 8680 1133

"Websites for the real world"

**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
**********************************************************************
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to