SSL is essential.  Decompiling a swf isn't going to assist in decrypting
SSL. You're thinking that SSL isn't good enough? AMF by itself just
compresses the data - it doesn't implement any sort of encryption,
AFAIK.

-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On
Behalf Of kenny14390
Sent: Monday, May 19, 2008 10:44 PM
To: flexcoders@yahoogroups.com
Subject: [flexcoders] Re: Securely Interfacing Between Flex and
Databases


Well the concern is that no matter how you choose to encrypt/decrypt
information, a Flash movie can always be decompiled and your decryption
method is caught with its pants down, allowing users to find out how to
view sensitive material that they're not supposed to be looking at. So
how are we supposed to move this kind of data in and out of a Flex
application without the worry? Does SSL even help? The concern is not
the forging of data, but rather the interception and decryption of it.

--- In flexcoders@yahoogroups.com, "andrewwestberg" <[EMAIL PROTECTED]>
wrote:
>
> Simply having SSL (https) enabled on your php webserver will help.
> Another methodology for accessing DB data is using AMFPHP (although I
> haven't used it myself).
> 
> -Andrew
>



------------------------------------

--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives:
http://www.mail-archive.com/flexcoders%40yahoogroups.comYahoo! Groups
Links



Reply via email to