Sign In/My Account | View Cart  
advertisement

Article:
 Nobody REALLY Asked Me, But...
Subject: Do NOT mistake this for security
Date: 2002-08-29 18:11:16
From: Jason May

I don't know what James' was originally looking for when he asked about obfuscation, but if he was hoping to get security for his application data, this isn't the way.


ROT-13 on a data payload will hold up a serious attacker for minutes at most. In particular this is incredibly weak for anything like credit card numbers.


If you really want to secure your data, encrypt the entire payload using a real cryptographic library.


No Previous Message Previous Message   Next Message Next Message


Sponsored By: