Enterprise Client Community

Hi Björn,

is the content of password field encrypted? Or is there a way to encrypt it before it will be send to the back end?

Regards,

Joachim

When using normal http it is NOT encrypted. - Of course when using https then there is a "perfect" encryption on the whole message.

So, everyone who uses the system "quite seriously" should use https.

Björn

Hello Björn,

thank You for the answer.

If possible, we prefered HTTP. The requirements for SSL are much higher: The first is the need of a server certificate.

Is it possible to get client side MD5 encryption?

Regards,

Joachim

OK, we now added encryption to the password field. You can select between all available encryptions that area available with MessageDigest.getInstance() (including MD5 and SHA-1).

Available with next update or on request.

Björn

Hi Brörn,

it's great!

Did You wrap a Swing textfield component?

I had a look into the EC manual "Adding own Components",
but found it as variant A (from A and B): "Documentation on (A) will follow."

Would be nice to get a sample.

Joachim

Hi,
you simple have to specify the encryption method in the PASSWORD definition:

Code:

 ...
 <t:password id="g_11" encryption="MD5" text="#{wp.DemoPassword.password2}" width="100" >
 ...

...same with SHA-encryption.

The value is then transferred from user input "aaaa" into some strange hash sequence inside the component on client side. To the server only the hash sequence "sdfgasdfjds83q24==" is sent.

Björn

Hi,

fine. That's the way we transmit passwords over the network and store passwords into a database table.There is no chance für database connection spoofing or TCP/IP paket collection.

The password policy can be checked within JavaScript - am I right?

How can I get the EC - JARs?

Joachim

Hi,

JavaScript? How did I find this nonsense?

I ment: Java code inside the client component.

Joachim

Encryption was added with 20090525.
Björn

Hello Björn,

would You switch on regex for password fields?

Joachim

...this is part of next update (next Monday, planned)...

Björn