Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Let’s say I have two machines, A and B, on the public internet (not an intranet).
Machine A has a web server that hosts unencrypted images of confidential documents.
Machine B hosts an ASP.net or Java servlet page for allowing manipulations of those images.
The URL of media on Machine A can be passed to the page on Machine B, which can then manipulate the image.
How can Machine B provide a guarantee that it does not retain any of the confidential information being passed to it from Machine A?
If Machine B has to have access to an unencrypted version of the documents from Machine A, and Machine A cannot trust the code running on Machine B, I can’t think of any way to guarantee to Machine A that Machine B has destroyed all copies of what was sent it.