Tweeted twitter.com/StackSecurity/status/1263892388566753280

occurred May 22, 2020 at 18:00

Became Hot Network Question

occurred May 22, 2020 at 17:22

added 39 characters in body

Source Link

edited May 22, 2020 at 10:55

163
1
7

I have a mobile application and the backend is hosted on a cloud provider. I would like to ask for feedback on encrypting all REST API calls that will be used to communicate with the server, if we should or we shouldn't do it.

Adding details:

< Certificate pinning is in place >

for example instead of having a proper rest object

{
   "name" : "username",
   "info" : "profile"
}

make it similar to this:

{
   "encryptedData" : "Mq6rTVdPP1YMlE9AxhnryIRX+JA9MfIXv"
}

and after decryption it becomes the model and the flow carries on, of course the response is also expected to be encrypted in a similar fashion.

I have a mobile application and the backend is hosted on a cloud provider. I would like to ask for feedback on encrypting all REST API calls that will be used to communicate with the server, if we should or we shouldn't do it.

Adding details:

for example instead of having a proper rest object

{
   "name" : "username",
   "info" : "profile"
}

make it similar to this:

{
   "encryptedData" : "Mq6rTVdPP1YMlE9AxhnryIRX+JA9MfIXv"
}

and after decryption it becomes the model and the flow carries on, of course the response is also expected to be encrypted in a similar fashion.

I have a mobile application and the backend is hosted on a cloud provider. I would like to ask for feedback on encrypting all REST API calls that will be used to communicate with the server, if we should or we shouldn't do it.

Adding details:

< Certificate pinning is in place >

for example instead of having a proper rest object

{
   "name" : "username",
   "info" : "profile"
}

make it similar to this:

{
   "encryptedData" : "Mq6rTVdPP1YMlE9AxhnryIRX+JA9MfIXv"
}

and after decryption it becomes the model and the flow carries on, of course the response is also expected to be encrypted in a similar fashion.

added 402 characters in body

Source Link

edited May 22, 2020 at 6:55

Rickky13

163
1
7

I have a mobile application and the backend is hosted on a cloud provider. I would like to ask for feedback on encrypting all REST API calls that will be used to communicate with the server, if we should or we shouldn't do it.

Adding details:

for example instead of having a proper rest object

{
   "name" : "username",
   "info" : "profile"
}

make it similar to this:

{
   "encryptedData" : "Mq6rTVdPP1YMlE9AxhnryIRX+JA9MfIXv"
}

and after decryption it becomes the model and the flow carries on, of course the response is also expected to be encrypted in a similar fashion.

I have a mobile application and the backend is hosted on a cloud provider. I would like to ask for feedback on encrypting all REST API calls that will be used to communicate with the server, if we should or we shouldn't do it.

Adding details:

for example instead of having a proper rest object

{
   "name" : "username",
   "info" : "profile"
}

make it similar to this:

{
   "encryptedData" : "Mq6rTVdPP1YMlE9AxhnryIRX+JA9MfIXv"
}

and after decryption it becomes the model and the flow carries on, of course the response is also expected to be encrypted in a similar fashion.

grammar corrections, added tag

Source Link

edit approved May 22, 2020 at 6:45

auspicious99

518
4
17

Should we Encryptencrypt all REST apiAPI calls from a mobile device?

I have a mobile application and the Backendbackend is hosted on a cloud provider,. I would like to ask feedbacksfor feedback on encrypting all REST API calls that will be useused to communicate with the server, if we should or we shouldn't do it.

Source Link

asked May 22, 2020 at 5:59

Rickky13

163
1
7

Loading

Stack Exchange Network

Return to Question

Should we Encryptencrypt all REST apiAPI calls from a mobile device?

Should we Encrypt all REST api calls from mobile device

Should we encrypt all REST API calls from a mobile device?