As part of Vuture’s ongoing security reviews, we have implemented automatic encryption for the ‘Email form to’ optional property of forms. This feature has been enabled automatically for all Vuture clients, and seamlessly encrypts the __vx_email hidden field to effectively hide our clients’ email addresses.

We use a RijndaelManaged symmetric encryption class (AES-based) to provide a reversible encryption function for hiding/obfuscating email addresses within the client’s public HTML. When Vuture detects a submission containing an encrypted email address we decrypt using the symmetric key and vector stored.

We cannot / will not share this key or vector.

For example

The email address entered here is automatically decrypted when editing the form and when the form is submitted, but will always render encrypted online.

API documentation

Vuture has also opened up our reversible encryption algorithm to our clients through a new API.

Form body request

Each input parameter will be encrypted once. If an encrypted value is passed in then it will not be double-encrypted.

JSON body request

{ input:[/* array of strings */] }