search

domogik / domodroid

Android client for Domogik
Other
12 stars 4 forks source link

#1835 crypt http password #14

Open tikismoke opened 8 years ago

tikismoke commented 8 years ago

need to crypt the password saved for httpauth in conf

tikismoke commented 8 years ago

After reading lots of doc, in all case it will be decrypted either by decompiling the apps or by reading source code.

tikismoke commented 8 years ago

Should try to implement something in future. Rest auth will be the only security for external access. But as said it will be difficult to protect it.

cereal2nd commented 8 years ago

its inckuded, you just have to enable it in the config

On Sun, Apr 10, 2016 at 10:50 AM, tikismoke notifications@github.com wrote:

Should try to implement something in future. Rest auth will be the only security for external access. But as said it will be difficult to protect it.

— You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub https://github.com/domogik/domodroid/issues/14#issuecomment-207946904

tikismoke commented 8 years ago

The problem is in domodroid app on android and the way preferences are saved in SD card. It's very easy for now to hack the phone or tablet and get it over adb for example.

Le 10 avril 2016 14:03:39 GMT+02:00, Maikel Punie notifications@github.com a écrit :

its inckuded, you just have to enable it in the config

On Sun, Apr 10, 2016 at 10:50 AM, tikismoke notifications@github.com wrote:

Should try to implement something in future. Rest auth will be the only security for external access. But as said it will be difficult to protect it.

— You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub

https://github.com/domogik/domodroid/issues/14#issuecomment-207946904

You are receiving this because you modified the open/close state. Reply to this email directly or view it on GitHub: https://github.com/domogik/domodroid/issues/14#issuecomment-207971306

Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma brièveté.