aSSL - securing communication without SSL
3 commentsFrancesco Sullo has just published his aSSL library (that powers also the PassPack service): It’s a nifty javascript library that allows encrypted communication between a browser and a server without using https.
I don’t see if this is possible but I think it would be nice if it allowed encrypted communication between two browsers, with the server being unable to read the exchange, just acting as a message passer. I’ll look deeper into this as soon as i have some time.
In this post I talked about...
Qui
Francesco Sullo Jan 7, 2007 · #
I’m happy of your interest on aSSL.
Primarily, I want to make a precisation: PassPack used aSSL only in the beta1 version, when we were waiting for a good SSL hosting service. In fact aSSL was born to elevate the security of non-critical sites (blog, chats, etc.).
About your question, at the moment aSSL permits only connections between one browser and one or more servers. But your idea is interesting and I’ll consider it for future enhancements.
Buon anno!
Francesco Sullo Jan 7, 2007 · #
Wait, it just occurred to me … that can be done already with aSSL.
aSSL acts as a protocoll, but you can create whatever client and server applications you wish. Sorry for the confusion.
I am preparing the documentation now so it should be more clear in the future what can be done.
lm Jan 7, 2007 · #
this is great, and I agree with your positioning of the library.
I think that it can have its role since we’ll see more “browser to browser” application arise (look also at the interest that comet and other browser “message buses” are gaining).
anyway great work (and boun anno too!)