Scott Stirling wrote:
> encrypt the
> password using something like an MD5 algorithm, and send that back to the
> server over regular HTTP.  Then you'd decrypt the password on the other
> side.
        MD5 is a secure hash not an encryption algorithm.  It turns arbitrary
length bitstrings into 128-bit long strings so it's kind of
non-invertible. ;-) Something encrypted with MD5 would stay that way for
good. ;-) Perhaps you meant RC5, it's a block cipher from the same folks
I think (RSA.com).


--
Take a walk on the wild side: http://www.metronet.com/~gardner/

There is a road, no simple highway, between the dawn and the
dark of night. And if you go no one may follow. That path is
for your steps alone.
                                The Grateful Dead ("Ripple")

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
FAQs on JSP can be found at:
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.html

Reply via email to