Home/ Questions/Q 6727747
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-26T10:05:10+00:00

I am in the process of developing website and an app (iOS and Android)

  • 0

I am in the process of developing website and an app (iOS and Android) that are supposed to communicate data over https. I don’t want the app clients intercepting these server messages, but I’d like to decrypt that data inside the app itelf.
so: after request, encrypt message (say up to 400kb message) (1st encryption), send over https (ssl encryption) (2nd encryption).
upon receive decrypt ssl, on the client level decrypt scrambled message.
(I don’t want some bots sniffing my db through https, in disguise of my app).
How do you think I should get around this problem ?

https is ok, I mean, but if someone is sending the requests instead of the app, the whole thing would be useless as I want to protect the DB data.

Any suggestions ? ideas ?

Thanks

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    All you need here is HTTPS/SSL with client authentication. Adding a second layer of encryption doesn’t actually add any security. PKI authentication of the client does.

    • 0