I´m building a enterprise application and I need to create a secure communication between android and a server. What is the most secure way to do End-to-End communication? Should I use HTTPS or VPN? There are better options?

  • 2
    HTTPS + certificate pinning seems like an obvious route. – domen Sep 3 '14 at 10:43
  • 2
    @domen you should post that as an answer, because it is the answer ;) – thexacre Sep 3 '14 at 11:05

HTTPS + certificate pinning seems like an obvious route.

  • Thats the way I will do. Just come here to know if there are more secure options to think about – user1416264 Sep 11 '14 at 13:52
  • What threats do you have in mind then? – domen Sep 11 '14 at 14:08
  • I want to block anykind of threat. I want to create a complete secure app. Packet sniffing, packet change , MITM etc. . . – user1416264 Sep 18 '14 at 9:56
  • So just MITM basically. Obviously you'd also need to secure the app itself, client and server side. Can unauthorized/spoofed clients be a problem? But we're getting out of scope of "end-to-end communication". – domen Sep 18 '14 at 12:28
  • Im creating a bank aplication. I have all the possible concerns! :) – user1416264 Sep 19 '14 at 17:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.