Tuesday, March 13, 2012

TextBox and Passwords

Hi,

When you set a textbox's TextMode to password, does this just stop the
password being displayed on the client machine or does it send the data to
the server encrypted.

Cheers

gwcNo it just means that it renders an HTML input tag of type password instead
of of type text, so it displays *** instead of the text you enter into it.
No encryption takes place.

"Gary Coutts" wrote:

Quote:

Originally Posted by

Hi,
>
When you set a textbox's TextMode to password, does this just stop the
password being displayed on the client machine or does it send the data to
the server encrypted.
>
>
Cheers
>
gwc
>
>
>


So does that mean that the password data is sent as plaintext back to the
server on a postback.

How do you protected against this data being snooped. As I presume to
encrypt it the data needs to be sent to the server for encryption.

"clickon" <clickon@.discussions.microsoft.comwrote in message
news:53724A74-9451-4B14-AC50-0E16034018A4@.microsoft.com...

Quote:

Originally Posted by

No it just means that it renders an HTML input tag of type password
instead
of of type text, so it displays *** instead of the text you enter into it.
No encryption takes place.
>
"Gary Coutts" wrote:
>

Quote:

Originally Posted by

>Hi,
>>
>When you set a textbox's TextMode to password, does this just stop the
>password being displayed on the client machine or does it send the data
>to
>the server encrypted.
>>
>>
>Cheers
>>
>gwc
>>
>>
>>


Hi,

Gary Coutts wrote:

Quote:

Originally Posted by

So does that mean that the password data is sent as plaintext back to the
server on a postback.


Yes, that's correct.

Quote:

Originally Posted by

How do you protected against this data being snooped. As I presume to
encrypt it the data needs to be sent to the server for encryption.


That's what SSL (HTTPS) is for.

HTH,
Laurent
--
Laurent Bugnion, GalaSoft
Software engineering: http://www.galasoft-LB.ch
PhotoAlbum: http://www.galasoft-LB.ch/pictures
Support children in Calcutta: http://www.calcutta-espoir.ch
Yes the password is sent plain text. to encrypt it you need to use SSL on
the server.

"Gary Coutts" wrote:

Quote:

Originally Posted by

So does that mean that the password data is sent as plaintext back to the
server on a postback.
>
How do you protected against this data being snooped. As I presume to
encrypt it the data needs to be sent to the server for encryption.
>
>
>
>
"clickon" <clickon@.discussions.microsoft.comwrote in message
news:53724A74-9451-4B14-AC50-0E16034018A4@.microsoft.com...

Quote:

Originally Posted by

No it just means that it renders an HTML input tag of type password
instead
of of type text, so it displays *** instead of the text you enter into it.
No encryption takes place.

"Gary Coutts" wrote:

Quote:

Originally Posted by

Hi,
>
When you set a textbox's TextMode to password, does this just stop the
password being displayed on the client machine or does it send the data
to
the server encrypted.
>
>
Cheers
>
gwc
>
>
>


>
>
>

0 comments:

Post a Comment