How can I make sure my iphone application is the one who is talking to my server?

While iPhone 3.0 is not available, I need to send an email with what created the iPhone application (image) and where the user selected.

Two solutions, the skpsmtpmessage library, which is not all there and is still buggy; or write your own server to send emails. The latter is not a problem for me, but the question is, how can I be sure that this is a message from my iPhone application, and not something else?

I can imagine using SSL, but I'm still surprised that someone on a jailbroken iPhone detaches my application and then uses a fake connection to spam through it.

My first thought is to force the server to accept data with only the exact set of functions (for example, exactly 1 jpg image, certain exact JSON data) and reject everything else. Of course, it could be DOSsed.

It makes sense? Has anyone done something like this?

EDIT: I will not send the email to my server, just JSON and the server will generate the actual email address.

+3
source share
5 answers

I do this in the application I'm working on. You can use a combination of public key encryption, SSL and a local telephone keyring.

  • , iPhone . , HTTP POST- SSL. .

  • , RSA . , UDID , ( ) . . (, MYSQL) UDID , , .

  • iPhone . , .. . .

  • , , ( + JSON), UDID -, , , RSA . HTTP POST ( SSL).

  • , RSA , , UDID - , , , , . , SMTP . .

  • . , . , , - UDID , . (SSL), , , , , .

  • , . , - , .

  • , . - . , , N ( , ). , . - , .

  • , , , , , . URL-, , iphone . , , , , URL- . , .

  • , , , , , cron SMTP- . , . , , , push-. , .

  • iPhone (.. ) Rails Django.

+3

, , . - - http POST, - , . ( , )

- - , , , , .

DDOS , , , .

+2

, - . , . , , .

, , . , , , , . , (, , , -).

-1
source

If possible, make the interface as useless as possible for spammers. If you create an email dump from a series of objects, for example, convert the objects to XML and send them, rather than sending the text of a possible email message. Spammers are looking for the weakest link and will move on if they have to make a lot of efforts to use your service.

-1
source

What happened to skpsmtpmessage?

-1
source

Source: https://habr.com/ru/post/1704945/


All Articles