stinkin "hackers"

Out of context: Reply #20

  • Started
  • Last post
  • 22 Responses
  • mitsu0

    you supply a username and password when you establish your connection to the backend - meaning, it's done server-side. the communication from the frontend to the backend needs no encryption. And besides, if you were to encrypt it, a cracker could just hack your front end and reverse engineer the encryptor and then open the text file and decrypt the data and rewrite it encoded. simple. the encryption process is only used when the data has successfully been sent to the server. at this point, in its encrypted format, it is then written to the database. And typically the encryptor is an autonomous, out of process dll or exe that handles this part of the transaction. This is seen mostly when handling sensitive information like credit card numbers, etc.

View thread