[android-developers] Re: Android Market Licensing: Now Available!

Do you obfuscate the URLs that contact the Android Market Licensing
server? If you do not, the first thing that the crackers will do is
replace your server URLs with bogus ones with a a hex editor, and your
whole system is dead in the water. Please advise.

On Jul 27, 1:53 pm, Trevor Johns <trevorjo...@google.com> wrote:
> It's implemented in the library.
>
> Cache contents are protected using a swappable Obfuscator class. We include
> a standard obfuscator implementation that encrypts cache data using AES-256
> and an application-specific key, along with a copy of the device ID. This
> prevents tampering with cache data, or replaying it across
> applications/devices. Developers are also free to implement their own
> Obfuscator if they so choose. (The cache itself contains timestamp data, so
> there's no point in replaying the cache data for the same application on the
> same device.)
>
> --
> Trevor Johns
> Google Developer Programs, Androidhttp://developer.android.com
>
>
>
> On Tue, Jul 27, 2010 at 1:31 PM, Kostya Vasilyev <kmans...@gmail.com> wrote:
> > Is caching implemented in the library or in the Market app?
>
> > I am concerned about potential abuse, such as replacing cache contents.
>
> > --
> > Kostya Vasilyev --http://kmansoft.wordpress.com
>
> > 28.07.2010 0:23 пользователь "Trevor Johns" <trevorjo...@google.com>
> > написал:
>
> > Developers can chose whether to implement response caching or not.
>
> > Assuming caching is enabled, we require a network connection for the first
> > license check, but then the user can go offline for a period of time before
> > requiring another license check.
>
> > --
> > Trevor Johns
> > Google Developer Programs, Android
> >http://developer.android.com
>
> > On Tue, Jul 27, 2010 at 1:19 PM, Kaj Bjurman <kaj.bjur...@gmail.com>
> > wrote:
>
> > > I saw that entry, ...
>
> > --
> > You received this message because you are subscribed to the Google
> > Groups "Android Developers" g...
>
> >  --
> > You received this message because you are subscribed to the Google
> > Groups "Android Developers" group.
> > To post to this group, send email to android-developers@googlegroups.com
> > To unsubscribe from this group, send email to
> > android-developers+unsubscribe@googlegroups.com<android-developers%2Bunsubs cribe@googlegroups.com>
> > For more options, visit this group at
> >http://groups.google.com/group/android-developers?hl=en

--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en