Click here to Skip to main content
15,889,116 members
Home / Discussions / Java
   

Java

 
AnswerRe: How to correctly use the interceptor encrypt all address Pin
Member 1127235629-Nov-14 0:38
Member 1127235629-Nov-14 0:38 
GeneralRe: How to correctly use the interceptor encrypt all address Pin
Richard MacCutchan29-Nov-14 0:54
mveRichard MacCutchan29-Nov-14 0:54 
QuestionHow to set the result variable of a javascript of one div to another div tag Pin
Member 1126811126-Nov-14 22:27
Member 1126811126-Nov-14 22:27 
AnswerRe: How to set the result variable of a javascript of one div to another div tag Pin
Richard MacCutchan26-Nov-14 22:57
mveRichard MacCutchan26-Nov-14 22:57 
GeneralRe: How to set the result variable of a javascript of one div to another div tag Pin
Member 1126811126-Nov-14 23:03
Member 1126811126-Nov-14 23:03 
Questionmd5 encription Pin
Trupti00125-Nov-14 20:23
Trupti00125-Nov-14 20:23 
AnswerRe: md5 encription Pin
Richard MacCutchan25-Nov-14 22:27
mveRichard MacCutchan25-Nov-14 22:27 
AnswerRe: md5 encription Pin
Richard Deeming26-Nov-14 1:49
mveRichard Deeming26-Nov-14 1:49 
Not only is MD5 deprecated in favour of more secure algorithms, it's a hashing algorithm, not an encryption algorithm. There is no "password", and you cannot "decrypt" the hashed value.

But that's a good thing, because you should never be able to decrypt the user's password. To validate that the user has entered the correct password, you just apply exactly the same hashing algorithm to the entered password, and compare the result to the stored hash value.

Salted Password Hashing - Doing it Right[^]

As for doing the hashing on the client side, that's a very bad idea. Anyone who can sniff the network traffic doesn't need to know the original password to impersonate the user; they can just submit the hashed password instead.

Set up an SSL certificate on your site, and ensure that your login page is only ever served over HTTPS. That way, the infrastructure will protect the password in-flight, and you can do your salted password hashing on the server, where it belongs.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer


QuestionHandling Unsigned Integers for Compatability Pin
Dominick Marciano24-Nov-14 15:50
professionalDominick Marciano24-Nov-14 15:50 
Questionwhats wrong with it? Pin
Member 1125103123-Nov-14 21:21
Member 1125103123-Nov-14 21:21 
AnswerRe: whats wrong with it? Pin
den2k8823-Nov-14 21:38
professionalden2k8823-Nov-14 21:38 
AnswerRe: whats wrong with it? Pin
Richard MacCutchan23-Nov-14 22:28
mveRichard MacCutchan23-Nov-14 22:28 
Question15 puzzle Pin
Member 1125103120-Nov-14 9:08
Member 1125103120-Nov-14 9:08 
GeneralRe: 15 puzzle Pin
PIEBALDconsult20-Nov-14 9:26
mvePIEBALDconsult20-Nov-14 9:26 
AnswerRe: 15 puzzle Pin
Richard MacCutchan20-Nov-14 21:53
mveRichard MacCutchan20-Nov-14 21:53 
SuggestionRe: 15 puzzle Pin
ZurdoDev21-Nov-14 2:24
professionalZurdoDev21-Nov-14 2:24 
QuestionGUI for many runs Pin
Roozmand Omid18-Nov-14 19:11
Roozmand Omid18-Nov-14 19:11 
QuestionRe: GUI for many runs Pin
Richard MacCutchan18-Nov-14 21:21
mveRichard MacCutchan18-Nov-14 21:21 
AnswerRe: GUI for many runs Pin
ZurdoDev21-Nov-14 2:25
professionalZurdoDev21-Nov-14 2:25 
QuestionCan we use kNN and k-mean at a same time? Pin
rushiraj_1118-Nov-14 7:32
rushiraj_1118-Nov-14 7:32 
GeneralRe: Can we use kNN and k-mean at a same time? Pin
PIEBALDconsult18-Nov-14 7:37
mvePIEBALDconsult18-Nov-14 7:37 
QuestionWhy the record cannot insert into MS access Pin
jdzgray14-Nov-14 5:50
jdzgray14-Nov-14 5:50 
AnswerRe: Why the record cannot insert into MS access Pin
PIEBALDconsult14-Nov-14 5:55
mvePIEBALDconsult14-Nov-14 5:55 
GeneralRe: Why the record cannot insert into MS access Pin
jdzgray14-Nov-14 6:13
jdzgray14-Nov-14 6:13 
AnswerRe: Why the record cannot insert into MS access Pin
jschell14-Nov-14 12:18
jschell14-Nov-14 12:18 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.