Generating Md5 Signature of SFSObject

[adenault]

Hi,

As a security measure, we are signing packets sent to and from the smartfox server using MD5 signature. However, we have having problems signing SFSObjects.

The idea is that we need a nice string representation of the SFSObject that is constant on both sides. First, we thought that we could JSON the SFSObject, but there is no garantee that the parameters will have the same order. Is there an efficient way already built-in to sign SFS objects?

On a side note, is there a very I can simply sign the packet itself (the byte representation of the payload) or is there any such protection built in?

Cheers,

Alex

[ThomasLund]

I think encryption is actually on the todo list for version 1 if I recall. But the SFS guys can chime in here.

If so, no need for you to add that extra unless you need it right now

/Thomas

[adenault]

Signing is not encryption. Encryption is designed to prevent a third party from viewing the message. Signing simply ensure authenticity and prevents tampering.

Cheers,

Alex

[tchen]

It's not built-in, but you could always try putting in all the signed stuff inside a POJO and deal with the ordering that way.

http://docs2x.smartfoxserver.com/Advanc ... ialization