Home/ Questions/Q 1001245
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-16T07:38:22+00:00

I want to send some data to a user after they log in to

  • 0

I want to send some data to a user after they log in to a web site, some kind of secret string for encryption.

I want to allow them to navigate around the web site, and I want to be able to use javascript on their machine to encrypt data before it’s sent back to the server. Note: This will be in addition to using SSL.

I don’t want to use cookies for this because they are sent to the server on each request.

So my aim is to have some data that will be sent across the wire only once for the whole session, but that when the user visits multiple pages, javascript will be able to access this secret. To be clear I never want to see the user’s decrypted data, nor be able to.

Is this possible, maybe using HTML5 persistence or something? I need a cross-browser compatible solution please that will ideally work with IE6 (so that might shoot down any HTML5 magic).

Thanks

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You can use localStorage on HTML5-supporting browsers (IE8, FF3+, Chrome, Safari 4+, Opera 9+). You can fall back to userData for IE6 and IE7. That gives you a guaranteed minimum of 64 KB of data on all platforms (minimum userData size).

    There’s a library that encapsulates the various strategies for storing data locally: PersistJS

    I use this to store client-side state that doesn’t need to be sent to the server with every request (e.g. resizable panel dimensions). I don’t think it could offer any additional security though, because any attacker that can decrypt the SSL stream can get at your data, because they can observe all your javascript code.

    • 0