|
Posted by veg_all on 12/17/25 11:53
As I read about security it seems that the only secure way to encrypt
data is to not store the key anywhere on the server. So I have the user
manually type it in and it gets stored as a persistent cookie on their
machine.
In other words, when the log in, they are prompted for the key . the
key is then posted via a form to a php script which stores the key as a
cookie. Is this secure? Is there any loophole in doing it this way?
Navigation:
[Reply to this message]
|