Bill Davidson wrote:

> Ok, got your point on encryption algorithms.  Public encryptions scare me,
> as at least they offer hints on to how they're done, making TRUE hackers one
> step closer to knowing where to look to find the key, or what the basis of
> the algorithm is.


If you mean public key encryption I disagree because the whole point is 
that the private key is different from the public key and you can 
therefore locate it on an entirely different location.
If you mean public algorithm encryption I disagree because it would be 
unrealistic to expect somebody to hack his way into the database but not 
being able to find the code that did the original encryption.


> As far as CFENCRYPT, I meant public in the fact that you can use CFDECRYPT
> to decrypt the values.

It is my understanding that cryptographically it is better to call it 
cfobfuscate as cfencrypt ;)

Jochem
______________________________________________________________________
Why Share?
  Dedicated Win 2000 Server · PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to