Topic History of: Collected Documentation Max. showing the last posts - (Last post first)
Author
Message
clw854
GREAT. but the web address does not lile chow!!!!!!!!!!!!!!!!!!
Charles
I know this is a bit dead... But you don't need SSL.
You have a DB of md5 hashes of passwords. (Plus a salt?)
Client knows the salt.
You send client random key(So someopne can't sniff and reuse old hash)
and the client performs an md5 on the password concatenated with the salt, gettign whtat you have in the DB. Then the client performs an md5 of the previous md5 concatenated with the random key. The server does the same, but with DB one.
Ahmed
hi,
the page mentioned in the first post is not available, it reports "failed to establish connection with the database" error ..
thanks
celio
most of the previous message was truncated, her it goes :
As3 Crypto is a cryptography library written in Actionscript 3 that provides several common algorithms. This version also introduces a TLS engine (TLS is commonly known as SSL.)
* Protocols: TLS 1.0 support (partial)
* Certificates: X.509 Certificate parsing and validation, built-in Root CAs.
* Public Key Encryption: RSA (encrypt/decrypt, sign/verify)
* Other Useful Stuff: HMAC, Random, TLS-PRF, some ASN-1/DER parsing
The library is offered under the BSD license, and include several derivative work from Java, C and javascript sources. Check the LICENSE.txt file for a list of contributors.
and this securised page wills end you something like
UNIQUE_IDENT_ID
you will send this ident to palabre for identification like
connect login="toto" pass="unique-ident-id"
palabre will check in ident_table if
login=xx and unique_ident_id=yy
and then (why not) delete this record from database.
Like that, if someone listen your palabre conversation, he can't log-in with your unique-ident-id because it can be used only one time.
You will have secure authentification, and next a plain conversation, without using ressource for crypting/decrypt, etc...
If flash can't load https page with load_var you can put your application into a https page, that will show after a traditionnal login page (php/python (django)/etc...) with flash_application and a variable that containt login, room_to_connect (why not) and unique_ident_id
I was doing things like that for my project.
Authentification in php, and next an ID that link to this authentification in database.
SORRY, website is currently mostly broken due to software changes on the server.
Hope to fix it soon ...
Palabre on Facebook
DOWNLOAD
FORUM
FAQ
WHAT IS IT
