41 reputation
2
bio website
location
age
visits member for 2 years, 3 months
seen Oct 11 '13 at 0:06

Jun
13
comment How to supply OpenSSL generated Private & Public Keys to iOS & Android apps?
The client certificate exchange happens within the HTTPS handshake. So every connection will be secured and the exchange will happen on initial https request, ie within the data exchange connection.
Jun
13
comment How to supply OpenSSL generated Private & Public Keys to iOS & Android apps?
For my purposes I always suggest and try to use something that is accepted, and verified to be correct. By using the full format you are sure the security is done correctly because it has been created and verified by smarter people than myself. I suggest you do not try to come up with your own solution for exchanging and signing keys. The web services can indeed verify the apps using this method, have a look into client certificates in your server language for more details. Unfortunately IMO the openssl library/app sucks (from a usability view), but it will suit your purposes.
Jun
13
awarded  Teacher
Jun
13
awarded  Editor
Jun
13
revised How to supply OpenSSL generated Private & Public Keys to iOS & Android apps?
added 748 characters in body
Jun
13
answered How to supply OpenSSL generated Private & Public Keys to iOS & Android apps?