Question

I have a Swing application that connect directly to MySql Database for user authentication.

• The bit code of the application will be available on Internet for download
• The connections information are in static variables

I know that I should’ve programmed a server to handle the authentication, but the initial requirement didn’t mention the authentication use case

My question is : is Obfuscating the application is enough to encode the connection information ?

Answer 1

You know what they say about security through obscurity! (Hint: it’s not security at all).

Encrypt it (though since there seems to be no server side component, I dont see a feasable way of doing this). Or do the authentication server side like you said.