Opened 9 years ago

Closed 6 years ago

#11307 closed enhancement (wontfix)

[patch][cla] encryption wrapper for dojox.storage

Reported by: Jens Arps Owned by: Jens Arps
Priority: low Milestone: 1.9
Component: Storage/Flash Version: 1.4.0
Keywords: needsreview Cc:
Blocked By: Blocking:

Description

This patch adds an encryption wrapper on top of dojox.storage at dojox.storage.encrypted. It exposes all the methods that dojox.storage does.
One of the major issues with client side persistent data storage is security. With DNS spoofing attacks you can overcome all domain-based access restrictions. One way to get around this is to encrypt all keys and values in the store.
Software encryption via JS is not a performance kicker, but sometimes security is more important than performance.

A live test page can be found here: http://jensarps.de/tests/dojo_tests/dojo-release-1.4.0-src/dojox/storage/tests/test_enc_storage.html

Attachments (1)

encrypted_storage.diff (10.0 KB) - added by Jens Arps 9 years ago.
The patch includes the encryption wrapper and test files.

Download all attachments as: .zip

Change History (6)

Changed 9 years ago by Jens Arps

Attachment: encrypted_storage.diff added

The patch includes the encryption wrapper and test files.

comment:1 Changed 8 years ago by Adam Peller

Owner: changed from Shane O'Sullivan to Jens Arps

comment:2 Changed 7 years ago by ben hockey

Keywords: needsreview added
Priority: highlow

comment:3 Changed 6 years ago by dylan

Milestone: tbd1.9
Status: newpending

This would have been fun and cool to have, but it's pretty out of date now.

Would need a rewrite for AMD, and more modern local storage, etc.

Jens, perhaps something like this can be salvaged for other projects we've been discussing around local storage?

comment:4 Changed 6 years ago by Jens Arps

Status: pendingnew

Yes, definitely, this a good idea – it makes more sense over there.

Maybe we want to close this then, as dojox.storage won't make it into 2.0 anyways?

comment:5 Changed 6 years ago by dylan

Resolution: wontfix
Status: newclosed

Thanks, I'll close it out here, and assume you have it covered from here.

Note: See TracTickets for help on using tickets.