Okay..it is not possible to call java functions from a greasemonkey script in the client side. But, it can allow cross-domain AJAX. So I’ve exposed the java functions through a servlet. Now I need to host this servlet in google app engine and whenever someone wants to get their password, the data from “pass.stor” in their local storage will be passed on to the servlet which in turn uses the java functions to decrypt the contents and send back the decrypted data. Then the data will get populated in the username, password text boxes. But how secure is it to send the plaintext username-password through http channel? I’ve halted a bit.
Cheers,
Surya.
No comments:
Post a Comment