Question

I ve setup a web server and can exchange data between it and my iPhone by using JSON.

JSON是否已经加密? 我试图让人们能够使用。我不知道如何确保用户的安全。我现在请他们提供一些独特的信息,说明他们及其GET的请求。

但是,难道有人会轻而易举,然后把GET的要求转嫁给服务器,以获得同样的信息?

这样做的正确途径是什么?

Answer 1

JSON没有自动加密,没有。

a. 配备SSH的服务器。 http://strong>should 防止了大多数MITM型攻击。如果你对客户(浏览器)的再攻击感到极为担忧,你很可能需要 oAuth+一种安全的不收货。

任何安全措施都不会保护你100%,你必须损害安全,否则就会失败。

Answer 2

If you are worried about MITM attacks, most likely someone sniffing requests on your network and then replaying them, you could set up SSL and send the JSON request via that, which would prevent the attack. The only other thing is that via GET your security variables will be exposed in the URL. Whether it is ideal form is what kind of information you are transferring and what other authentication you are using.

http://joekuan.word.press.com/ 201005/08/quick-步s-on-ging-apache-sl-php-json-on-freebsd-8-0/

友情链接