Capper was the one of the few apps that motivated me to go through the hassle of setting up an SSL key and such, and the first to motivate me to set up a CA cert (so that I can get at my capper app from my android tablet).
The large random number sparse caps work well for authorization, but while we're at it, how about integrity? How about URLs such as https://myhost:1341/FINGERPRINT/ocaps/#s=82q1...? This would make them YURLs.
I might try this out... pki.js looks promising.
Based on a clue, I get:
Capper$ openssl x509 -noout -in ssl/server.crt -fingerprint -sha1
SHA1 Fingerprint=AF:1B:04:F8:76:61:33:2B:E1:88:60:80:1D:C4:02:9D:FC:DA:6B:0B
Capper$ openssl x509 -noout -in ssl/server.crt -fingerprint -sha256
SHA256 Fingerprint=FF:C1:4A:7D:47:D7:F6:AE:E2:95:4B:E0:9E:36:55:DC:7E:99:4A:CF:BD:38:B7:0F:78:28:B0:86:2C:F8:E6:0B
For bonus points: encrypt the capper.db with the same key.
Capper was the one of the few apps that motivated me to go through the hassle of setting up an SSL key and such, and the first to motivate me to set up a CA cert (so that I can get at my capper app from my android tablet).
The large random number sparse caps work well for authorization, but while we're at it, how about integrity? How about URLs such as
https://myhost:1341/FINGERPRINT/ocaps/#s=82q1...? This would make them YURLs.I might try this out... pki.js looks promising.
Based on a clue, I get:
For bonus points: encrypt the capper.db with the same key.