Opened 12 years ago

Closed 9 years ago

#11307 closed enhancement (wontfix)

[patch][cla] encryption wrapper for

Reported by: Jens Arps Owned by: Jens Arps
Priority: low Milestone: 1.9
Component: Storage/Flash Version: 1.4.0
Keywords: needsreview Cc:
Blocked By: Blocking:


This patch adds an encryption wrapper on top of at It exposes all the methods that does.
One of the major issues with client side persistent data storage is security. With DNS spoofing attacks you can overcome all domain-based access restrictions. One way to get around this is to encrypt all keys and values in the store.
Software encryption via JS is not a performance kicker, but sometimes security is more important than performance.

A live test page can be found here:

Attachments (1)

encrypted_storage.diff (10.0 KB) - added by Jens Arps 12 years ago.
The patch includes the encryption wrapper and test files.

Download all attachments as: .zip

Change History (6)

Changed 12 years ago by Jens Arps

Attachment: encrypted_storage.diff added

The patch includes the encryption wrapper and test files.

comment:1 Changed 11 years ago by Adam Peller

Owner: changed from Shane O'Sullivan to Jens Arps

comment:2 Changed 10 years ago by ben hockey

Keywords: needsreview added
Priority: highlow

comment:3 Changed 9 years ago by dylan

Milestone: tbd1.9
Status: newpending

This would have been fun and cool to have, but it's pretty out of date now.

Would need a rewrite for AMD, and more modern local storage, etc.

Jens, perhaps something like this can be salvaged for other projects we've been discussing around local storage?

comment:4 Changed 9 years ago by Jens Arps

Status: pendingnew

Yes, definitely, this a good idea – it makes more sense over there.

Maybe we want to close this then, as won't make it into 2.0 anyways?

comment:5 Changed 9 years ago by dylan

Resolution: wontfix
Status: newclosed

Thanks, I'll close it out here, and assume you have it covered from here.

Note: See TracTickets for help on using tickets.