Phishing Protection: Server Spec: Difference between revisions

Phishing Protection: Server Spec (view source)

17 bytes removed , 5 May 2006

m

14

edits

@@ Line 90: / Line 90: @@
 To decrypt an encrypted lookup request, a server needs to inspect the following query parameters:
-    * encver: The algorithm version used by the client to construct the encrypted URL. The only valid version is currently 1.
+* encver: The algorithm version used by the client to construct the encrypted URL. The only valid version is currently 1.
-    * nonce: A random nonce selected by the client to seed the encryption algorithm. The server needs to convert it into an unsigned 32-bit integer.
+* nonce: A random nonce selected by the client to seed the encryption algorithm. The server needs to convert it into an unsigned 32-bit integer.
+* wrkey: The wrappedkey provided by the server as response to a GetKey? request.
-    * wrkey: The wrappedkey provided by the server as response to a GetKey? request.
+* encparams: The encrypted content of the lookup request.
-    * encparams: The encrypted content of the lookup request.
 The description of the current encryption algorithm can be found below. Decryption results, in an unencrypted lookup request; see above.