Tag Info

New answers tagged


Put a challenge-response-system in the code - the server sends "12345", the client answers with "SHA256(12345+any-secret-key)". If the server knows the "secret key", it can check the hash. That would stop people just sniffing the network data, but the app might still get decompiled. If you want the app to send data, you need to make a "login" first - ...


Claims and capabilities are both evidence-supported tokens, but they are totally different in terms of intent. In a capabilities-based access control model, a capability is a token which demonstrates a capability, i.e. a right to perform an action on an object. An important thing to note here is that the capability does not contain any notion of identity, ...

Top 50 recent answers are included