commons-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Henri Yandell (JIRA)" <>
Subject [jira] Commented: (FILEUPLOAD-119) The encryption & decryption of uploaded file
Date Fri, 10 Nov 2006 07:37:38 GMT
    [ ] 
Henri Yandell commented on FILEUPLOAD-119:

I've moved the issue over to the FileUpload project.

There are three areas that seem of importance here:

Client side
Server side

As far as a browser and FileUpload are concerned, if the file is encrypted I imagine that
it's not going to care. It's going to take that encrypted file, upload it and place it on
the server's disk. Then it's just a question of having code on the server side to decrypt
things. I'm pretty sure FileUpload won't have anything to support that because its functionality
is limited by the default behaviour of web browsers (they're the clients to fileupload's serverside).

Transport is easy to solve - use SSL. 

I suspect that the easiest way to solve the server side (ie: not encrypted on client and send
over SSL) is to use an encrypted file system. I don't know if FileUpload has hooks that would
let you encrypt the file before it writes it to disk (anyone?), but that seems a weaker solution
and more work than just taking care of things at the hardware level.

Hope that helps,


> The encryption & decryption of uploaded file
> --------------------------------------------
>                 Key: FILEUPLOAD-119
>                 URL:
>             Project: Commons FileUpload
>          Issue Type: New Feature
>         Environment: Windows/Linux
>            Reporter: inderjeet
>            Priority: Critical
> Hi,
> Can we upload the file in the encypted format and later decrypt it to show the file so
that noone can directly open the file from the disk space (hard disk) where i have uploaded
the file usinf fileUpload functionality. This is the major concern for our project ?
> Is there any external library which can do this for us even just after we upload the
file through this API ?
> Thanks & Regards
> Inderjeet

This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
For more information on JIRA, see:


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message