Key-Exchange Logic for Encrypting Interface Data in Front-End/Back-End Separated Projects (RSA, AES)
In front-end/back-end separated projects, sensitive info such as passwords and amounts often needs to be transmitted. Signature/verification algorithms only guarantee data isn't tampered with, but can't keep data confidential. If the user's password is transmitted in plaintext, it can be intercepted by nodes in the network. Although most network operators don't intercept transmitted content, you can't rule out whether the WiFi the user connects to is a phishing network, so sensitive info needs encryption when transmitted. This article discusses how to securely let the client and server exchange keys.





