Re: CGI security on a shared web server

From: Kurt Seifried (bugtraqat_private)
Date: Thu May 23 2002 - 13:05:36 PDT

  • Next message: Antonomasia: "Re: CGI security on a shared web server" 

    One possible solution, assuming you need to write the data but not read it
until later is to encrypt it, generate a public/private keypair using
pgp/gnupg, load the public key onto the server with your app, have it write
the files after encrypting the data. Thus you can retrieve the data (ftp,
www, whatever) and then decrypt it at your leisure and use it.


Kurt Seifried, kurtat_private
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://seifried.org/security/
http://www.iDefense.com/

    This archive was generated by hypermail 2b30 : Thu May 23 2002 - 13:30:30 PDT