Re^2: Encrypt files on server and then decrypt when user downloads

[blue_cowdawg]

Simply configure your web server to use SSL.

I wasn't going to suggest that, however you are very correct. Reason I wasn't going to suggest that is depending on his web environment it may not be an option. For instance hosting companies usually (well... that is less true these days) charge a premium for SSL enabled hosting. In a corporate environment SSL usually incurs a cost that some management won't approve.

[moritz]

For instance hosting companies usually (well... that is less true these days) charge a premium for SSL enabled hosting. In a corporate environment SSL usually incurs a cost that some management won't approve.

That might be true, but I don't think one can expect to come up with a self-made solution that comes near to SSL in terms of security, and that doesn't cost much more in total, if you include cost for development and maintenance of the custom solution.