Examples of encryption for database access

Brian Milby brian at milby7.com
Mon Jun 25 23:57:18 EDT 2018


One thing this misses is that the IV is not another private key/password. It should be random/different for every use of the key.

https://en.m.wikipedia.org/wiki/Initialization_vector

https://crypto.stackexchange.com/questions/3965/what-is-the-main-difference-between-a-key-an-iv-and-a-nonce

https://security.stackexchange.com/questions/35210/encrypting-using-aes-256-do-i-need-iv

On Jun 25, 2018, 7:34 PM -0400, William Prothero via use-livecode <use-livecode at lists.runrev.com>, wrote:
> Mark:
> Thanks, that makes it a lot easier. I have been tearing my limited hair out over trying to set Apache environmental variables and deleted a load of files on my server, accidentally.
>
> This I can do.
> Best,
> Bill
>
>
> > On Jun 25, 2018, at 4:04 PM, Mark Wieder via use-livecode <use-livecode at lists.runrev.com> wrote:
> >
> > On 06/25/2018 02:17 PM, William Prothero via use-livecode wrote:
> > > Mark:
> > > I’ve been exploring, Googling, and my Web Host Manager to figure out where to set the environmental variables for the security keys. It might be nice if I could set different values for different subdomains on my server, but my Web Host Manager program states that it will put a copy of the keys in the .htaccess file. Is the .htaccess file for a domain a secure place to put the keys?
> >
> > Yes, that's a proper place to initialize server variables, and especially if you want different values for different subdomains, as you'll have a separate .htaccess file for each subdomain. In *theory* nobody has access to the . files except you.
> >
> > The .htaccess line will look something like
> >
> > SetEnv name value
> >
> > --
> > Mark Wieder
> > ahsoftware at gmail.com
> >
> > _______________________________________________
> > use-livecode mailing list
> > use-livecode at lists.runrev.com
> > Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> > http://lists.runrev.com/mailman/listinfo/use-livecode
>
>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode



More information about the use-livecode mailing list