Timeline for Best practices for setting up client connections to a server with app credentials
Current License: CC BY-SA 3.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 21, 2013 at 12:38 | comment | added | Dave | I updated the question. The tools is on our servers, and clients simply send requests to it (in the web version, a piece of javascript code sends AJAX requests with data and receives the results). As for API keys, anybody could listen-in to a legitimate communication (or look at the javascript code, or strings in the executables) and extract the key. I know this is theoretically impossible to secure, which is why I'm looking for the current accepted (practical) solution. | |
| Mar 21, 2013 at 3:01 | history | answered | user10211 | CC BY-SA 3.0 |