google app engine - Use JavaScript encryption module instead of SSLHTTPS - Stack Overflow

admin管理员组

文章数量:1295950

Is that worth it to use some JS encryption library to make safe munication instead of SSL? I ask this because I want to secure my application built on Google App Engine and it doesn't let you to use your own domain for SSL requests. What are good ways to municate securely with GAE? Thanks.

Is that worth it to use some JS encryption library to make safe munication instead of SSL? I ask this because I want to secure my application built on Google App Engine and it doesn't let you to use your own domain for SSL requests. What are good ways to municate securely with GAE? Thanks.

• javascript
• google-app-engine
• ssl

Share Improve this question Follow asked Feb 28, 2011 at 17:11 Sergei BasharovSergei Basharov 53.9k7878 gold badges207207 silver badges352352 bronze badges 3

• 3 I would have to say No. JS encryption != SSL. Not by a long shot. – Loktar Commented Feb 28, 2011 at 17:12
• SSL gives you lots of nice things like non-reputation (the client can trust you are who you say you are), and protection of man-in-the-middle attacks. JS cypto library isn't a great idea when SSL does so much more for you. – russau Commented Mar 1, 2011 at 2:21
• @russau: although precisely because of the "can't use your own domain for HTTPS" thing, GAE doesn't let the client trust that you are who you say you are. It lets the client trust that you're Google (i.e. that they're talking to Google), because it's Google's name on the certificate. They may also believe that Google is acting on behalf of who you say you are, but if so it's not because SSL has proved it. – Steve Jessop Commented Mar 9, 2011 at 1:30

Add a ment  | 

4 Answers 4

Sorted by: Reset to default 4

[Note: See Correction below]

It is possible to securely municate with an authenticated server on google app engine with a custom domain, but it is a hassle. As some of the other answers indicate, you must be very careful how you implement the encryption to prevent man-in-the-middle attacks.

Here are the basic instructions for python, but you could could modify for java. Expect to spend at least a day or two getting something like this up and running.

Prerequisites:

• A python RSA and AES library for the server. pyCrypto works well on GAE.
• A javascript RSA and AES library to be run on the client. I used stanford's RSA library and crypto-js for AES. I can't remember why I didn't just use one library.

Instructions:

• Step 1: Offline, create a RSA public and private key pair. Here are pyCrypto instructions.

• Step 2: Save the generated RSA public & private keys in a python file, be sure the private key is not publicly accessible.

• Step 3: On the server, create a request that generates a javascript file. The javascript file should only transmits the public key to the client. For example, it would only return a file with this:

  var public_key="[your public rsa key here]"

• Step 4: In your app.yaml file, make sure that the generated javascript file is only served over SSL (i.e. set secure: always). See instructions here.

• Step 5: On the client, load the javascript file using ssl. However, instead of using your custom domain, use the appspot domain. For example, add this to your html file:

<script src="https://example.appspot./publicKey.js"></script>

The client will now have an authenticated RSA public key preventing man-in-the-middle attacks. Note: accessing other domains is normally prohibited by browsers to prevent XSS, but there is a loophole which allows you to load javascript files.

• Step 6: On the client, generate a random private key. Use a javascript RSA library and the public key we got in step 4 to encrypt the random private key. Send the encrypted private key to the server.

• Step 7: On the server, decrypt the random key generated on the client using the RSA private key.

  At this point, both the server and the client have the same private key. Even better, because the original public key was transmitted over SSL, we can authenticate that the server is really who we believe it is (i.e. no man-in-the-middle).

• Step 8: Now the server and client can encrypt and decrypt any data they want using the randomly generated private key and their respective AES libraries.

-- EDIT: CORRECTION --

Bruno's ment below is 100% correct, the above steps are insecure. Although the steps above do work to setup an authenticated session between client and server, the only way that the user would really know it was authenticated is if they checked the code to ensure that the public key was being loaded using https. A man-in-the-middle could serve the initial html page modify the <script src="https://... code to point to something else.

Instead, take a look at wwwizer..

Javascript is a client side language, meaning it runs in the user's browser, so any user can alter, manipulate and disable it as they please; rendering your encryption useless.

EDIT: Don't you mean Java?

No, it's not worth it, because you have to send the Javascript code to the client somehow. The attacker could simply modify the Javascript to make it possible for him to read (or modify) all the munications, rendering all your protections useless. SSL really is the only option.

You have to use https, but you can't use it on your own domain with appengine. They say that they will add that ability soon, though. We've been using the annoying https appspot domain assuming that they really will add support for https custom domains, but in the meantime none of our (~75) customers have plained about the appspot thing.

I guess the real question is how many people AREN'T customers because of the appspot thing... but I suspect it's a small number.

本文标签： google app engineUse JavaScript encryption module instead of SSLHTTPSStack Overflow