Re: Hash for data in transit

Saleh <[email protected]>
Newsgroups gmane.comp.security.web-applications
Message-ID <[email protected]>
According to one of my friends ([email protected])
CRC is not that good in data integrity (errors can be masked)
HTTPS will do good =D

On Wed, Jul 21, 2010 at 5:21 AM, Nikhil Wagholikar
<[email protected]> wrote:
>
> Hi Richard,
>
> CRC is one of the best methods for integrity checking (more precisely
> 'detection') of data between web server and web browser.
>
> In any case, like Robert said, HTTPs will do integrity check for the data.
>
> ---
> Nikhil Wagholikar
> Senior Consultant
> Ernst and Young (India)
> Web: http://www.ey.com/India
>
> On 21 July 2010 01:33, <[email protected]> wrote:
> >
> > Does anyone know of any tools out there that can be used to ensure the integrity of data while in transit from a web app and a user using a website to enter information?
> >
> > I've heard of Tripwire and ossec but those more for OS or for files at rest.
> >
> > Any ideas are welcomed. Thanks.
> >
> >
> >
> > This list is sponsored by Cenzic
> > --------------------------------------
> > Let Us Hack You. Before Hackers Do!
> > It's Finally Here - The Cenzic Website HealthCheck. FREE.
> > Request Yours Now!
> > http://www.cenzic.com/2009HClaunch_Securityfocus
> > --------------------------------------
> >
>
>
>
> This list is sponsored by Cenzic
> --------------------------------------
> Let Us Hack You. Before Hackers Do!
> It's Finally Here - The Cenzic Website HealthCheck. FREE.
> Request Yours Now!
> http://www.cenzic.com/2009HClaunch_Securityfocus
> --------------------------------------
>



--
Saleh Alsanad
http://www.google.com/profiles/q8mosfet



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.