security - need to develop utility independent of technology used for website development -
i need utility given customer having site name a.com can decry-pt messages passed own site (i.e. b.com), build in java technology.
utility should independent of technologies used customer web site development.
question: technology should used developing such utility ?
note: have read javascript not cryptography.
the best option use existing, tried-and-tested protocol. tls choice securing communication between 2 parties.
if, reason, cannot use existing protocol, you'll have design own, , describe in such detail others can implement on platforms. far ideal several reasons. designing cryptographic protocols hard, , experts regularly wrong. implementing cryptographic protocols hard too, , experts wrong. there no way non-cryptographer design or implement secure protocol.
Comments
Post a Comment