Question

I’m working on an iOS app, where it needs to connect to a web service that located on a web server. And it needs to give an arguments to some .php files that will receive these arguments via the POST method. The problem is that I don’t want anyone to look/know these arguments, and what I’ve tried is that WireShark can discloses/sniffs the values of these arguments.

So, what is the suitable approach to secure the connection?, I thought about encrypting the data befor sending them to the server (using simle secrete/single key, since my data are not highly sensitive) and the same for fetching data from the server, if I’d go with this approach, then I’ll need to implement my own classes, but I’m running out of time.

Thanks in advance 🙂

Answer 1

Use https instead. Your data are not highly sensitive, so this should be enough. You may not even have to change your iPhone code (other than the URL change), although this depends on your server’s certificate.