When you run under SSL the browser does then encrypting of client data and
sends it to the server still encrypted. The server then unencrypts the
packets. If you only want the password encrypted then run only the password
form under SSL. There is also a client side way to do it with JS.
Ron
At 12:08 PM 8/10/98 +0300, Malka Cymbalista wrote:
>I recently asked a question about encrypting a password. Thanks to Victor
>Tsaran, Chad Zimmerman, and Peter Schoenster for their replies. I think
>someone else also answered but I seem to have lost that answer.
>Someone suggested that I use a perl script to encrypt. But if I do that,
>then the password gets passed as clear text from the client to the server
>(since presumably that's where the script will be run and that's where
>the encryption will take place) and that is what I want to avoid. Someone
>suggested encrypting in javascript but I couldn't find anything in the
>documentation explaining how to do this.
>If I go the SSL route, does that mean that all documents sent have to be
>encrypted? Is that a drain on resources? All I really want encrypted is
>the password.
>I've been reading a bit on this topic and I saw a discussion on digest
>authentication. Does anyone know if there any browsers that support this?
>I looked at the netscape help but couldn't find anything.
>Thanks for any information.
>
>Malki Cymbalista
>Software Support, Weizmann Institute Computing Center
>Rehovot, Israel 76100
>Internet: [EMAIL PROTECTED]
>
>____________________________________________________________________
>--------------------------------------------------------------------
> Join The Web Consultants Association : Register on our web site Now
>Web Consultants Web Site : http://just4u.com/webconsultants
>If you lose the instructions All subscription/unsubscribing can be done
>directly from our website for all our lists.
>---------------------------------------------------------------------
>
____________________________________________________________________
--------------------------------------------------------------------
Join The Web Consultants Association : Register on our web site Now
Web Consultants Web Site : http://just4u.com/webconsultants
If you lose the instructions All subscription/unsubscribing can be done
directly from our website for all our lists.
---------------------------------------------------------------------
