Use signtext. It's easy, your application could follow the following steps:
1.- The client fills the form (including files to be uploaded) and submits (unsigned) data to the server 2.- Your CGI/servlet/jsp/... verifies data, calculates hashes for the files uploaded and generates text to be signed by the client, for example: Name: James Bond Age: 87 File1: size: 867 bytes md5: 67a43e7e34534257 sha1: e5a76433c67766253533 File2: size: 5432 bytes md5: a654ee3453222222 sha1: bbb54333c67766253677 3.- Client signs (via signtext) text and submits the signature to the server. 4.- Your CGI/servlet/jsp/... checks the signature with the data uploaded previously. Hope this helps. jose Luis Michelena <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > what would be the steps necesary in order to sign a form including files > to be uploaded? > I found a signForm example in netscape site, but it didn't sign the > files uploaded. > The simplest solution I thougth about, was using an applet to make a > digest of the file(s) first, an then using the window.cryto.signText() > function as in that example... > But it is neither elegant nor standard. > > �Can it be done through javascript only? or it necesarily means the use > of XPCom, Java or something alike. > > Any pointer, besides the ones already on this group (like secclab), > would be helpfull _______________________________________________ mozilla-crypto mailing list [EMAIL PROTECTED] http://mail.mozilla.org/listinfo/mozilla-crypto
