search

darwinex / dwxconnect

Seamlessly link any Trading Strategy in ANY programming language to Darwinex liquidity via MetaTrader 4 or 5. DWX Connect is your very own, fully customizable Trading API!
BSD 3-Clause "New" or "Revised" License
158 stars 84 forks source link

Message integrity / authenticity #7

Closed agung-wete closed 2 years ago

agung-wete commented 2 years ago

CMIIW. Right now, anyone/ program with access to DWX files can alter the file. There should be mechanism (ex hmac) in mql5 & client side to securely exchange messages.

elvinex commented 2 years ago

Hi, Thank you very much for your suggestion. You are right that this is not a very secure way of exchanging messages.

The current version should be used on a PC or VPS where only the trader has access and knows what he is doing (not modifying the files with other programs). Our mail goal was to keep it simple and to provide the same solution for MT4 and MT5. Therefore, I am not yet sure if we will add encryption in the future, but I will keep it in mind.