Reputation: 193
I'm passing passwords by webservice. My question is very simple: there's any way of anyone getting those passwords, by sniffer or something?
The passwords I'm passing are essentially to connect to database. I can't pass an hash password because then I wouldn't be able to connect to database.
Also, there's any way of getting access to SQLiteDatabase generated for any application?
Thanks.
Upvotes: 1
Views: 43
Reputation: 3579
Use HTTPS. That way you don't have to care about the password being traced by packet sniffers. This link might help with the common pitfalls : http://developer.android.com/training/articles/security-ssl.html
Upvotes: 1