jQuery - ASPX 安全库
我想知道是否有像 jCryption (jCryption) 这样的组合 - PHP 但适用于 jQuery - ASPX。 我的意思是，我一直在寻找一个组合，可以使用 jQuery 向 ASPX 双向发送数据（客户端-服务器、服务器-客户端）。我发现最好的是 jCryption，它将数据从 JavaScrpit 发送到 PHP。我需要一个组合来将数据从 JavaScrpit 发送到 ASPX。
有什么想法吗？
PD：请不要告诉我使用 HTTPS，它不足以确保客户端 - 服务器应用程序上的数据通信。
I would like to know if there's a combo like jCryption (jCryption) - PHP but for jQuery - ASPX.
I mean, I have been searching for a combo to send data both ways (Client-server, server-client) with jQuery to ASPX. The best I found was jCryption that sends data from JavaScrpit to PHP. I need a combo to send data from JavaScrpit to ASPX.
Any ideas??
PD: Please don't tell me to use HTTPS, it's not enough to ensure the data communication on a client - server application.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
“请不要告诉我使用 HTTPS，这不足以确保客户端 - 服务器应用程序上的数据通信”
好吧，抱歉，但这正是我的意思。我要做。 SSL 比使用 JavaScript 所做的任何事情都安全得多。使用非 SSL，您将明文发送到客户端/服务器，这意味着如果我可以看到数据包，则中间人攻击（例如您在我的咖啡店、我的无线路由器）不是这样的很难。您将如何在 JavaScript 中做更安全的事情？
您将通过纯文本连接来回发送所有密钥，从而否定了您认为这会增加的任何安全性。这就像在您的前门上添加一个额外的锁舌一样，是否会使其更安全？不是真的，因为您刚刚给了我一份密钥副本:)
SSL 完美吗？ 不，已经发现了像其他任何东西一样的漏洞。它是否比密钥自由可见的任何加密方式（例如未加密连接上的 JavaScript）更安全？ 是。
您提到的 jCryption 并不是 SSL 的替代品，不过您不必相信我，查看作者的评论，只需滚动到底部即可。
或者，阅读常见问题解答本身：
"Please don't tell me to use HTTPS, it's not enough to ensure the data communication on a client - server application"
Well, sorry, but that's exactly what I'm going to do. SSL is far more secure than anything you're able to do with JavaScript. With non-SSL you're sending clear-text to client/server, meaning if I can see the packets, a man in the middle attack (e.g. you're at my coffee shop, my wireless router) is not that hard. How would you do anything more secure in JavaScript?
You would be sending all keys back and forth over a plain-text connection, negating the point of any security you think this adds. This is like adding an extra deadbolt to your front door, does it make it any more secure? Not really, because you just gave me a copy of the key :)
Is SSL perfect? No, there have been holes found like anything else. Is it way more secure than any encryption where the keys are freely visible, e.g. JavaScript over an unencrypted connection? Yes.
jCryption that you mention is not a replacement for SSL, you don't have to believe me though, look at the comments from it's author, just scroll to the bottom.
Or, read the FAQ itself:
这可能太少了，也太晚了；不过，我已将原作者的服务器端 PHP 代码移植到 C#，因此您现在可以在 ASP.NET 应用程序中双向使用 jCryption。我还使用了 OpenSSL.NET，因此您不必像 Daniel Griesser 在他的 PHP 示例代码中那样在单独的进程中运行 OpenSSL。
您可以在这里找到更多信息：http://blog.arkitekt.ca/post/64884550698/jcryptionnet< /a>
并且，GitHub 存储库位于：https://github.com/triniMahn/jCryptionNET
This might be too little, too late; however, I've ported the original author's server-side, PHP, code to C#, and so you can now use jCryption, bi-directionally, in an ASP.NET application. I've also used OpenSSL.NET, so that you don't have to run OpenSSL in a separate process, as Daniel Griesser does in his PHP sample code.
You can find more information here: http://blog.arkitekt.ca/post/64884550698/jcryptionnet
And, the GitHub repo here: https://github.com/triniMahn/jCryptionNET