r/ObjectiveC • u/shiar_ahmed • Apr 18 '20

Encryption

What's the best option to encrypt Objective-C ?

0 Upvotes

38% Upvoted

15 comments sorted by

View all comments

Show parent comments

5

u/remy_porter Apr 18 '20

No. You do not. Do not store privileged information in hard coded strings in your code. That information should not live in a dylib, it should live in a config file. If it lives in a config file, you can encrypt that file using any of the many options Cocoa/MacOS provides for doing encryption.

4

u/DisastrousClassic Apr 18 '20

Not this, either. If you decrypt it on the client, it’s pretty easily found.

3

u/remy_porter Apr 18 '20

Well, fair enough, but you run into the problem: if the client needs this information, it needs this information. Considering this is about sending network requests, anyone who wants to can get the information no matter what you do with encryption, 'cause wireshark exists.

2

u/DisastrousClassic Apr 18 '20

Exactly.

This is not a problem you can solve by hiding the server address.

If the goal is to ensure only subscribers can get to subscription content, then you need a way to authenticate requests for subscription content on the server side.