4 ms·
Might be a stupid question, but why server can't see the secret key? You said that "note that URL fragments are never sent to the server", which is true when u
by fireattack 6y ago
Might be a stupid question, but why server can't see the secret key?
You said that "note that URL fragments are never sent to the server", which is true when uploading the file. But when someone is downloading the file, they need to use this full URL with secret key right? By then, the server will get the key and can decrypt the file themselves.
- hiq 6y agoSee the post that OP linked: > Note that URL fragments are never sent to the server. They are often used for page anchors, and sometimes to keep track of local state in SPA. Also see: https://en.wikipedia.org/wiki/URI_fragment#Basics https://en.wikipedia.org/wiki/URI_fragment#Basics
- fireattack 6y agoThank you for the info. I thought it's setup specific, didn't know anchor string is never sent to servers in general.