Question

I’m wanting to create an android app that gathers information and then uploads to a server — however I don’t want people to be able to edit the file before it’s sent to the server. I can do the first part of it, but am unable to do the second part. Can anyone tell me the best way to go about this? I don’t mind if the user knows what’s in the file, just don’t want them editing it and then uploading their edited information to the server.

Answer 1

You’re pretty much out of luck since the application is run by the user and the output is controlled by the user. The only way you could take over user’s system so he would have no control over it would be using trusted computing with all of the ethical and philosophical implications – see eg. Can You Trust Your Computer? by Richard Stallman. The only thing you can hope for is having a secure connection between your server and user’s systems (SSL/TLS) but this is still user’s system over which you have no control.