The web client password encryption make sense

  Front-end password encryption in the end there is no meaning through work experience, my personal opinion is as follows?:

  Encryption only to prevent being intercepted by a third party, there will be uncertainties in the transmission network, the network environment is not necessarily safe, such as the use of other people's wifi, if the plaintext transmission was intercepted, and the username password, order information at a glance, you may lose a lot of the time. If encrypted transmission, it does not let out of sight, non-professional nature to give up, now at the extent of popular single-page module package, on the front end encryption plus compression js confusion, enough to annihilate the majority of illegal decipher information. Front-end encryption still has some significance.

b2bf7a36cd594087b25da6a8e22716c9.jpg

  So I think certainly better than not to write to write, after all, the encryption plus compression, most people are not out to analyze thrown off balance. Not encrypted, even people you have not read the source code, looking directly at the data packet transmission of information to know, if encryption, you have to analyze source code, but js compression confusion, plus they do not know your encryption method case, unless the top ***, most people really can not break. But the actual work I have not encrypted, after all, are https, or is within the network. Security is also not so high. Some friends would say, do not do front-end makes no sense, because the back-end will do, I think the background is done, the database is to prevent theft, but the foreground to the background transmission takes time. During the foreground to the background, which is itself the client environment is uncertain, wrote, would not be transmitted in clear text, source code analysis comes at a price, especially js compression confusion, poor semantic situation, coupled with encryption it is difficult to analyze, and in no case be confused js compression, encryption, in fact very little meaning, but with compression confusion difficulty multiplier, because the source code is very difficult to read, even though I write this program will not necessarily be able to analyze it, only through keyword search, not once found out, basically gave up, because usually no one wants to read a large section looks disordered garbled.


Guess you like

Origin blog.51cto.com/14390906/2407510