[thelist] Checksum web pages ???
Shawn K. Quinn
skquinn at xevious.kicks-ass.net
Wed Feb 18 12:28:18 CST 2004
On Wednesday 2004 February 18 09:32, Sam Carter wrote:
> Is there any technology out there that'll put a checksum on a web
> page at edit time so we can know if it's been hacked?
I have seen a couple of Web sites make detached OpenPGP-compatible
signatures of each page. If you run a passphrase agent you should not
need to type in your passphrase more than once to make the signatures.
Any simple, non-cryptographically-protected checksum is subject to
forgery by a vandal (I don't use the term "hacker" to refer to this
sort) if kept in the same place as the Web pages. If you don't use
OpenPGP-compatible signatures, you would need to store the checksums on
a different computer from the Web server.
--
Shawn K. Quinn
More information about the thelist
mailing list