3 ms·
I'm not sure that is true. If the link automatically decrypts the paste then you could use server logs to get the plaintext of the document.
by zitterbewegung 15y ago
I'm not sure that is true. If the link automatically decrypts the paste then you could use server logs to get the plaintext of the document.
- dylanpyle 15y agoFrom my understanding, the link contains 2 parts -- paste ID, and decryption key _following_ a "#". Assuming the latter isn't going into the server logs (I believe the fragment identifier isn't sent in headers at all, unless there's JS on the page to tell the server about it), the actual decryption seems to be taking place via javascript (as well as the encryption to begin with), and therefore the encryption key has no reason to be sent to the server at any point.
- munin 15y agosee: http://sebsauvage.net/wiki/doku.php?id=php:zerobin http://sebsauvage.net/wiki/doku.php?id=php:zerobin the "pasting" and "opening" sections cover this
- tocomment 15y agoSomeone didn't read the project page ... See the section "When opening a ZeroBin URL: "