<body><script type="text/javascript"> function setAttributeOnload(object, attribute, val) { if(window.addEventListener) { window.addEventListener('load', function(){ object[attribute] = val; }, false); } else { window.attachEvent('onload', function(){ object[attribute] = val; }); } } </script> <div id="navbar-iframe-container"></div> <script type="text/javascript" src="https://apis.google.com/js/platform.js"></script> <script type="text/javascript"> gapi.load("gapi.iframes:gapi.iframes.style.bubble", function() { if (gapi.iframes && gapi.iframes.getContext) { gapi.iframes.getContext().openChild({ url: 'https://www.blogger.com/navbar.g?targetBlogID\x3d6460305619331450763\x26blogName\x3dCache+Your+Cash\x26publishMode\x3dPUBLISH_MODE_BLOGSPOT\x26navbarType\x3dSILVER\x26layoutType\x3dCLASSIC\x26searchRoot\x3dhttps://cacheyourcash.blogspot.com/search\x26blogLocale\x3den_US\x26v\x3d2\x26homepageUrl\x3dhttp://cacheyourcash.blogspot.com/\x26vt\x3d5601808346138360992', where: document.getElementById("navbar-iframe-container"), id: "navbar-iframe", messageHandlersFilter: gapi.iframes.CROSS_ORIGIN_IFRAMES_FILTER, messageHandlers: { 'blogger-ping': function() {} } }); } }); </script>

Cache Your Cash


Francais | Espanol | Deutsche | Italiano | 中文 | 한국어 | 日本語 |

Firefox Extension: Use OpenPGP for HTTP Protocol

Wednesday, April 18, 2007


Enigform is an interesting idea of using OpenPGP for HTTP authentication. It's basically a firefox extension and works on similar principal of PGP.

[Quote from the website]

Enigform is a Mozilla Firefox extension that provides you the ability to digitally sign HTTP requests, even those generated via AJAX calls. This extension is focused on adding an extra layer of security to the HTTP protocol.

By having the GET query string and the POST payload ("variable=test") signed using an ASCII armored, Clearsign, OpenPGP based procedure, the browsing user can provide Identity and Data Authentication to that payload, thus adding all OpenPGP benefits to the HTTP protocol.


Enigform

Labels: , ,


Digg | delicious | Spurl | redit
posted by cacheyourcash, 3:44 PM

2 Comments:

You might also want to checkout mod_auth_openpgp which is an Apache module that verifies the signatures added by enigform.
commented by Anonymous Anonymous, April 19, 2007 at 11:38 AM  
I really appreciate your post

Add a comment