search

JPII / NavalBattle

Strategic turn-based naval game.
http://jpii.github.io/NavalBattle
GNU General Public License v3.0
3 stars 3 forks source link

Data should be encrypted during data transmission. #194

Open maximusvladimir opened 11 years ago

maximusvladimir commented 11 years ago

Currently, the data is streamlined directly through unsecured connections, potentially allowing data to be compromised. This could allow modifications and changes to data en-route, thus would allow rigging of the game.

The proposed solution would be to take advantage of OSUtil.java and generate a key using enigma methods. This fix should be permissible for the current time frame, as it will allow data to be secured as it is in transfer.

(Pardon my outlandish language, as I have been listening to symphony.)

maximusvladimir commented 11 years ago

Data is now encrypted, but keys are static. Keys should be generated in runtime.

maximusvladimir commented 11 years ago

Obviously this is not a priority.

ThomasGaubert commented 11 years ago

Can this be pushed back since there is more important things to do? This can be taken care of post launch.

maximusvladimir commented 11 years ago

Added some cryptography helpers recently.

ThomasGaubert commented 11 years ago

Removed milestone.