Re: Encryption - Newbie

From: Bonj (a_at_b.com)
Date: 03/19/04


Date: Fri, 19 Mar 2004 19:25:27 -0000

If it's easily hackable, would you want to be using it? How do you know
someone else couldn't hack it just like you have, and hack your program in
the process?

"Anonymous" <anonymous@discussions.microsoft.com> wrote in message
news:FA05D1E4-7157-49C3-8977-E605CCA11432@microsoft.com...
> Hi,
> I have a web site that is using SSL to get data from the end user. I want
to do the following:
> 1. Pass the data to a COM object sitting on another server SECURELY. am
I able to create a secure connection between the 2 machines?
> 2. Encrypt the data using some encryption tool. I would need help here
to find which tool to use. I looked into PGP but they don't have a command
line argument version of their tool. They only have a GUI interface. Any
ideas here? Does windows have an encryption DLL that I can use? Is it
secure or is it easily hackable?
> 3. Store the encrypted data in the database?
>
> Also, the Web site is never going to interact with the DB directly. All
calls will be through the COM object on another machine. Does anyone have
any experience with how secure this topology is?
>
> please advise.
> mike



Relevant Pages

  • Re: Unbreakable Encryption ? Scenarios - What encryption method would be best?
    ... DES is a well-known algorithm so there are good reasons to have a good ... > risk it by storing one of the best possible passwords (or encryption ... > Ok lets say there will be a secure channel but it will happen only ... > because the decrypting method yielded a plain text message and vice ...
    (sci.crypt)
  • Re: [fw-wiz] Re: Firewalls breaking stuff: [Was re: fwtk]
    ... > access to the mail server's private keys and thus the monitor can follow the ... > in a way that's more secure rather than less secure. ... for service level encryption versus VPN access. ... >> reducing bugs reduces the number of sever bugs. ...
    (Firewall-Wizards)
  • Re: Best secure surfing solution
    ... I have set up a service with companies providing secure web ... the product would have to install a keylogger. ... If we caught anyone in> IS or elsewhere in our company sniffing our communications, even if they> were encrypted, they'd get laid off or, at least, suspended. ... If e-mails are sensitive then> the sender should be using encryption. ...
    (sci.crypt)
  • Re: Best secure surfing solution
    ... I have set up a service with companies providing secure web ... the product would have to install a keylogger. ... If we caught anyone in> IS or elsewhere in our company sniffing our communications, even if they> were encrypted, they'd get laid off or, at least, suspended. ... If e-mails are sensitive then> the sender should be using encryption. ...
    (alt.computer.security)
  • Re: Symmetric encryption algorithm with group like properties
    ... >> Solutions that exist today are not as secure as they can be. ... I wouldn't expect more than PGP / GPG type encryption, ... > versions - with the key, protected by RSA encryption under a RSA public key ... > Alice needs a secure decryption mechanism to read her emails, ...
    (sci.crypt)