[ 
http://issues.apache.org/jira/browse/FILEUPLOAD-119?page=comments#action_12448672
 ] 
            
Henri Yandell commented on FILEUPLOAD-119:
------------------------------------------

I've moved the issue over to the FileUpload project.

There are three areas that seem of importance here:

Client side
Transport
Server side

As far as a browser and FileUpload are concerned, if the file is encrypted I 
imagine that it's not going to care. It's going to take that encrypted file, 
upload it and place it on the server's disk. Then it's just a question of 
having code on the server side to decrypt things. I'm pretty sure FileUpload 
won't have anything to support that because its functionality is limited by the 
default behaviour of web browsers (they're the clients to fileupload's 
serverside).

Transport is easy to solve - use SSL. 

I suspect that the easiest way to solve the server side (ie: not encrypted on 
client and send over SSL) is to use an encrypted file system. I don't know if 
FileUpload has hooks that would let you encrypt the file before it writes it to 
disk (anyone?), but that seems a weaker solution and more work than just taking 
care of things at the hardware level.

Hope that helps,

Hen

> The encryption & decryption of uploaded file
> --------------------------------------------
>
>                 Key: FILEUPLOAD-119
>                 URL: http://issues.apache.org/jira/browse/FILEUPLOAD-119
>             Project: Commons FileUpload
>          Issue Type: New Feature
>         Environment: Windows/Linux
>            Reporter: inderjeet
>            Priority: Critical
>
> Hi,
> Can we upload the file in the encypted format and later decrypt it to show 
> the file so that noone can directly open the file from the disk space (hard 
> disk) where i have uploaded the file usinf fileUpload functionality. This is 
> the major concern for our project ?
> Is there any external library which can do this for us even just after we 
> upload the file through this API ?
> Thanks & Regards
> Inderjeet

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to