1. Forum
  2. Usenet
  3. COMP.INFOSYSTEMS.WWW.SERV

  • nonce module

    From Dan Car@21:1/5 to All on Wed Oct 26 07:32:06 2022
    I am trying to find a module that can be used to generate nonces.
    Mod_unique_id seems to generate "@" which is not recognized by the browsers. Mod_csp_nonce seems to be good enough but not recognized by my organization. Will Apache support this module in the future? Do I have other alternatives?

    Thank you

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From I R A Darth Aggie@21:1/5 to 4a0c48d3-fb32-4fe3-b5d6-8eec097ec4c on Wed Oct 26 21:41:23 2022
    On Wed, 26 Oct 2022 07:32:06 -0700 (PDT),
    Dan Car <[email protected]>, in <[email protected]> wrote:
    I am trying to find a module that can be used to generate nonces.
    Mod_unique_id seems to generate "@" which is not recognized by the browsers.
    Mod_csp_nonce seems to be good enough but not recognized by my organization.
    Will Apache support this module in the future? Do I have other alternatives?

    Thank you

    Maybe this will help?

    https://serverfault.com/questions/856206/how-to-inject-random-csp-nonce-in-apache

    --
    Consulting Minister for Consultants, DNRC
    I can please only one person per day. Today is not your day. Tomorrow
    isn't looking good, either.
    I am BOFH. Resistance is futile. Your network will be assimilated.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dan Car@21:1/5 to I R A Darth Aggie on Thu Oct 27 01:58:45 2022
    On Wednesday, October 26, 2022 at 11:41:24 PM UTC+2, I R A Darth Aggie wrote:
    On Wed, 26 Oct 2022 07:32:06 -0700 (PDT),
    Dan Car <[email protected]>, in
    <[email protected]> wrote:
    I am trying to find a module that can be used to generate nonces. Mod_unique_id seems to generate "@" which is not recognized by the browsers.
    Mod_csp_nonce seems to be good enough but not recognized by my organization.
    Will Apache support this module in the future? Do I have other alternatives?

    Thank you
    Maybe this will help?

    https://serverfault.com/questions/856206/how-to-inject-random-csp-nonce-in-apache

    --
    Consulting Minister for Consultants, DNRC
    I can please only one person per day. Today is not your day. Tomorrow
    isn't looking good, either.
    I am BOFH. Resistance is futile. Your network will be assimilated.
    Dear Aggie,

    Thank you.
    I have tried with unique_id but it inserts the "@" character of which I cannot rid it off.
    Is this solution solving this issue?

    All the best,
    Daniel Carbunescu

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From I R A Darth Aggie@21:1/5 to 7087753b-011d-4dcc-abf4-a11d4a4622e on Thu Nov 3 18:29:36 2022
    On Thu, 27 Oct 2022 01:58:45 -0700 (PDT),
    Dan Car <[email protected]>, in <[email protected]> wrote:
    On Wednesday, October 26, 2022 at 11:41:24 PM UTC+2, I R A Darth Aggie wrote:
    On Wed, 26 Oct 2022 07:32:06 -0700 (PDT),
    Dan Car <[email protected]>, in <[email protected]> wrote:
    I am trying to find a module that can be used to generate nonces. Mod_unique_id seems to generate "@" which is not recognized by the browsers.
    Mod_csp_nonce seems to be good enough but not recognized by my organization.
    Will Apache support this module in the future? Do I have other alternatives?

    Thank you
    Maybe this will help?

    https://serverfault.com/questions/856206/how-to-inject-random-csp-nonce-in-apache

    --
    Consulting Minister for Consultants, DNRC
    I can please only one person per day. Today is not your day. Tomorrow
    isn't looking good, either.
    I am BOFH. Resistance is futile. Your network will be assimilated.
    Dear Aggie,

    Thank you.
    I have tried with unique_id but it inserts the "@" character of which I cannot rid it off.
    Is this solution solving this issue?

    https://codingshower.com/apache-web-server-generate-unique-id-for-every-request/

    "All the information above is encoded like base64, only difference
    being in the characters used – [A-Za-z0-9@-] is replaced with
    [A-Za-z0-9+/]."

    You can test with a bit of PHP:

    <?php
    echo $_SERVER["UNIQUE_ID"];


    I haven't seen any "@"s.

    --
    Consulting Minister for Consultants, DNRC
    I can please only one person per day. Today is not your day. Tomorrow
    isn't looking good, either.
    I am BOFH. Resistance is futile. Your network will be assimilated.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)