security - What is a good browser level encryption product? -


i'm looking product can provide browser-level encryption of textual data before it's sent backend server. https can secure transport mechanism need packet encrypted on browser first. data packet must end in encrypted form on backend database. use case is: user fills out form on browser, user submits form data, before sending data on wire, browser encrypts data, data ends in backend database in encrypted form, @ point in time, of data collected backend database, moved disconnected computer , decrypted @ point.

that's https (ssl/tls) for. should plenty secure enough.

but state in answer query, want form data stored in database in encrypted form. quick google search brings jquery.gibberish-aes. it's jquery plugin aes encryption , can utilise rsa public key.

using generate public/private key pair, keep private key on super-secret disconnected computer, , publish public key form. can encrypt data, store in database, , if got root access database server decrypt data because secret key on secure disconnected machine.

i'm sure there'd similar plug-ins/libraries other client-side frameworks if don't use jquery.

i'd still use ssl/tls connection, because provides server authentication (and client authentication if want) protect against man-in-the-middle.


Comments

Popular posts from this blog

ASP.NET/SQL find the element ID and update database -

jquery - appear modal windows bottom -

c++ - Compiling static TagLib 1.6.3 libraries for Windows -