3 ms·
In cryptography there is the clear difference between encrypting and signing (Confidentiality and Integrity). Is this distinction possible on a webserver/browse
by memen 4y ago
In cryptography there is the clear difference between encrypting and signing (Confidentiality and Integrity). Is this distinction possible on a webserver/browser? I.e.
No encryption, no signing -> HTTP
Encryption and signing -> HTTPS
No encryption, signing -> ?
What about public information (not confidential) that needs verification (yes integrity)?
- paulhodge 4y agoDon’t think it exists for the HTML document. HTTPS works fine for public & unconfidential things. For verifying page resources there is a newish feature: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres... .
- norhi999 4y agoSomething like this maybe: https://tools.ietf.org/id/draft-hallambaker-httpintegrity-02.html https://tools.ietf.org/id/draft-hallambaker-httpintegrity-02... although it's an unimplemented draft.