Encription

> so there is no another way to encrypt data unless by

> SSL ?

well of course there is,

> SSL not only for encrypt data its also prevent Man

> in The Middle and have Key management ( public ,

> private)

well, encryption prevents man in the middle attack; ssl does use rsa for a setup phase, but the actual data isn't encrypted with that.

prob.not.sola at 2007-7-12 17:20:21 >

> as i know , encryption doesn't prevent Man in the

> Middle attack .

> Mutual Authentication , Kerberos , prevent man in the

> Middle ,

> but encryption it self not prevent Man in the Middle

well, kerberos is just a protocol; mitm is about editing/reading messages that are passed through the 'man'.

if it's encrypted [symmetrically] then this attack is not possible.

some replay is possible; obviously, but depending on the implementation of the protocol you can avoid that easily.

symmetric encryption is typically enough.

prob.not.sola at 2007-7-12 17:20:21 >

> > <.... action=/servlet/rcvData method=post>

> > when the form submits data its look like:

> >

> http://www.domainName.com/servlet/login?user=asd

>

> > f&pass=asdf

>

> You have a form that is doing a post that looks like

> that?

thanks for replies. plz let me know what should i do?

farakha at 2007-7-12 17:20:21 >