Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

关于注册密码安全性的问题 #3

Open
MrTanXin opened this issue Nov 21, 2021 · 3 comments
Open

关于注册密码安全性的问题 #3

MrTanXin opened this issue Nov 21, 2021 · 3 comments

Comments

@MrTanXin
Copy link
Contributor

MrTanXin commented Nov 21, 2021 •
edited
Loading

你好：
目前看到注册是调用的"https://study.jszkk.com/api/auth/reg" 这个路由注册的
但是这个路由是http方式进行访问且密码在Payload中被明文传输，可能存在安全风险。
是不是可以考虑下在端侧非对称加密之后，将加密后的密文进行上传以解决安全问题，当然如果有更好的解决方案也可以！
我比较看好这个项目，也会持续关注
Have a Nice Day :)
@MrTanXin
Copy link
Contributor Author

当然 登录的操作应该也类似 使用相同的加密方式然后到后端比对查询

@MrTanXin
Copy link
Contributor Author

副作用是 对密码的校验需要在前端完成

@PBK-B
Copy link
Member

PBK-B commented Nov 21, 2021

@MrTanXin 好建议，下个版本安排上

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@MrTanXin @PBK-B