Re: [php-gtk-webmaster] cvs: php-gtk-web / admin-logout.php

[email protected] ("Steph Fox") Sun, 9 Jul 2006 23:59:23 +0200
Newsgroups php.gtk.webmaster
Message-ID <068601c6a3a2$f0a0b050$6602a8c0@foxbox>
I already MD5'd it, didn't you look at the code?

> Once again, signed cookies have nothing to do with SSL. They rely on  
> hash algos like MD5 and SHA-1.
> 
> -Andrei
> 
> 
> On Jul 9, 2006, at 2:37 PM, Steph Fox wrote:
> 
>> Yeah I know about SSL. I just don't know if it's appropriate for this.
>>
>>>> Whatever... it still needs to be a different cookie.
>>> Fine, so let's do that.
>>>> What do you mean by 'signed'? do we have a secure server setup?
>>> Signed cookies prevent tampering. You can read a bit about it here:
>>> http://www.hccfl.edu/pollock/Docs/PubKeyCrypto/
>>> -Andrei
>>> __________ NOD32 1.1380 (20060125) Information __________
>>> This message was checked by NOD32 antivirus system.
>>> http://www.eset.com
>>>
> 
> 
> __________ NOD32 1.1380 (20060125) Information __________
> 
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
> 
>