One thing this misses is that the IV is not another private key/password. It should be random/different for every use of the key.
https://en.m.wikipedia.org/wiki/Initialization_vector https://crypto.stackexchange.com/questions/3965/what-is-the-main-difference-between-a-key-an-iv-and-a-nonce https://security.stackexchange.com/questions/35210/encrypting-using-aes-256-do-i-need-iv On Jun 25, 2018, 7:34 PM -0400, William Prothero via use-livecode <use-livecode@lists.runrev.com>, wrote: > Mark: > Thanks, that makes it a lot easier. I have been tearing my limited hair out > over trying to set Apache environmental variables and deleted a load of files > on my server, accidentally. > > This I can do. > Best, > Bill > > > > On Jun 25, 2018, at 4:04 PM, Mark Wieder via use-livecode > > <use-livecode@lists.runrev.com> wrote: > > > > On 06/25/2018 02:17 PM, William Prothero via use-livecode wrote: > > > Mark: > > > I’ve been exploring, Googling, and my Web Host Manager to figure out > > > where to set the environmental variables for the security keys. It might > > > be nice if I could set different values for different subdomains on my > > > server, but my Web Host Manager program states that it will put a copy of > > > the keys in the .htaccess file. Is the .htaccess file for a domain a > > > secure place to put the keys? > > > > Yes, that's a proper place to initialize server variables, and especially > > if you want different values for different subdomains, as you'll have a > > separate .htaccess file for each subdomain. In *theory* nobody has access > > to the . files except you. > > > > The .htaccess line will look something like > > > > SetEnv name value > > > > -- > > Mark Wieder > > ahsoftw...@gmail.com > > > > _______________________________________________ > > use-livecode mailing list > > use-livecode@lists.runrev.com > > Please visit this url to subscribe, unsubscribe and manage your > > subscription preferences: > > http://lists.runrev.com/mailman/listinfo/use-livecode > > > _______________________________________________ > use-livecode mailing list > use-livecode@lists.runrev.com > Please visit this url to subscribe, unsubscribe and manage your subscription > preferences: > http://lists.runrev.com/mailman/listinfo/use-livecode _______________________________________________ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
