WebApp Sec: Re: Must we authenticate login forms (using SSL?)?

[Peter Conrad <conrad () tivano de>]

Hi,

On Thu, Sep 29, 2005 at 10:02:00PM -0700, Nathaniel S. H. Brown wrote:
> I have created a very unique, yet simple method of a form encryption that
> provides the same mechanism that the public/private key entails.
>
> Check out my just published release at
> http://www.nshb.net/secure-form-post-with-javascript-without-ssl
erm... this sounds like a plain old challenge-response mechanism. Or
maybe I don't understand what you mean with "private key" and "public
key" in your description.

Bye,
        Peter
-- 
Peter Conrad                        Tel: +49 6102 / 80 99 072
[ t]ivano Software GmbH             Fax: +49 6102 / 80 99 071
Bahnhofstr. 18                      http://www.tivano.de/
63263 Neu-Isenburg

Germany