Forum Discussion
Encrypt Suspend Data?
The encryption part is really interesting. How are you managing SL serialising all its tracked variables into suspend_data on every slide change, not just on exit? So if the real income figures live in normal SL variables, they’re going to Moodle in plaintext on every navigation, no matter what your encrypt-on-exit code does.
yes, that's exactly right. that's why i'm reaching out to see if anyone has figured a way around this. my only other thought would be to encrypt the values before they reach the storyline variable using custom html and js and then decrypt using the same whenever i need it. but that's a mountain of work and i was hoping someone might have a more elegant thought? i appreciate any input here. and thanks for chiming in.
- DShaw2 months agoCommunity Member
To keep sensitive values out of SL variables entirely you could hold them in a JS object and let just one SL text variable carry the encrypted blob. That way SL only ever saves ciphertext. When a slide needs to show a result, JS decrypts, calculates, and pushes only the final display text into a variable you clear on slide-exit. How do you manage your key? I assume you’ve ensured it isn’t hardcoded into the SCORM zip?
- jchoe2 months agoCommunity Member
Yes, that's spot on. In my early tests, to keep it simple, I was including the key in the zip, but will move it to the server for more security. Have you or anyone you know attempted this?
- DShaw2 months agoCommunity Member
I know exactly how to do it... It's the type of thing I do for clients as part of my business...
Related Content
- 5 months ago
- 1 year ago