Opened 10 years ago
Closed 7 years ago
#11307 closed enhancement (wontfix)
[patch][cla] encryption wrapper for dojox.storage
| Reported by: | Jens Arps | Owned by: | Jens Arps |
|---|---|---|---|
| Priority: | low | Milestone: | 1.9 |
| Component: | Storage/Flash | Version: | 1.4.0 |
| Keywords: | needsreview | Cc: | |
| Blocked By: | Blocking: |
Description
This patch adds an encryption wrapper on top of dojox.storage at dojox.storage.encrypted. It exposes all the methods that dojox.storage does.
One of the major issues with client side persistent data storage is security. With DNS spoofing attacks you can overcome all domain-based access restrictions. One way to get around this is to encrypt all keys and values in the store.
Software encryption via JS is not a performance kicker, but sometimes security is more important than performance.
A live test page can be found here: http://jensarps.de/tests/dojo_tests/dojo-release-1.4.0-src/dojox/storage/tests/test_enc_storage.html
Attachments (1)
Change History (6)
Changed 10 years ago by
| Attachment: | encrypted_storage.diff added |
|---|
comment:1 Changed 10 years ago by
| Owner: | changed from Shane O'Sullivan to Jens Arps |
|---|
comment:2 Changed 8 years ago by
| Keywords: | needsreview added |
|---|---|
| Priority: | high → low |
comment:3 Changed 7 years ago by
| Milestone: | tbd → 1.9 |
|---|---|
| Status: | new → pending |
This would have been fun and cool to have, but it's pretty out of date now.
Would need a rewrite for AMD, and more modern local storage, etc.
Jens, perhaps something like this can be salvaged for other projects we've been discussing around local storage?
comment:4 Changed 7 years ago by
| Status: | pending → new |
|---|
Yes, definitely, this a good idea – it makes more sense over there.
Maybe we want to close this then, as dojox.storage won't make it into 2.0 anyways?
comment:5 Changed 7 years ago by
| Resolution: | → wontfix |
|---|---|
| Status: | new → closed |
Thanks, I'll close it out here, and assume you have it covered from here.
The patch includes the encryption wrapper and test files.