CODEWITHSUNDEEP
javascriptphpjqueryencryption
Roman Matveev
Roman Matveev

Reputation: 577

Encripting the data between web-application and the server

I'd like to avoid of using of the API by anybody except my web-application.

I could encrypt the data sending to server via post requests and decrypt the responses of the API's server. But hacker can dig into the web-page code and simulate the web-page behavior and make harm to the server (for example by spamming one).

I could uglyfy JS code but can I consider that it is enough for applications not as secured as bank? Probably I missed any easy and beautiful solution?

Upvotes: 1

Views: 63

Answers (1)

Scott Arciszewski
Scott Arciszewski

Reputation: 34093

But hacker can dig into the web-page code and simulate the web-page behavior and make harm to the server (for example by spamming one).

This is an unavoidable truth about client-server applications!

You cannot prevent a dedicated reverse engineers from simulating your client-side application. It's a fool's errand to try.

Instead, architect your products to ensure server-side data maintains its integrity even if the client-side application is inauthentic.

Upvotes: 1

Related Questions