and use Obfuscated text or normal text and enter the encoded text here than its ready now u can set this for api/secret/token anything it will automatically call the actual text which you have encoded using our service.
thank you for your contributionā¦
however somehow Iām not sure if I understand, when exactly I could use the extension ā¦
could you explain a little bit more in detail and provide an example, when exactly the use of the extension would make senseā¦
Thank you
But one has to send their secret key in plain unencrypted text across the net with a get request to a third party web site, who can access this secret key, in order to get it encoded ā¦
If I hash my Secret or API or URL inside my appā¦ itās not gonna be a secure practice but if I hash it using my server codes which can only be decoded by this extension - make the process more secure and safeā¦
what exactly is the extension about? hashing or encryption?
see the difference here
There is a fundamental difference between Hashing and Encryption algorithms, see this stackoverflow answer: Hashing is one way. You can not get your data/string from a hash code. Encryption is 2 way - you can decrypt again the encrypted string if you have the key with you.
and here you are talking about decoding/encodingā¦
everything in this thread is a bix mix of everythingā¦ encryption/decryption, hash, encoding/decodingā¦
in short you can explain as;
The server script simply convert your key/API/Url into the Key which can be then decoded only by using this extensionā¦
Also as i havenāt relesed this opensource so i donāt think, there is a need to explain about the backend. As i already siad you key/secrect/api/url is not gonna be stored on server itāll simply get converted to a key taht my extension can simply convert it back to actual data.
Only for mister Taifun!!
On server [ When You Generate Key]:
the script 1st hash your key{data} using a custom pattern and set of hashing.
Now this hashed data is then encoded to add an extra layer of security. [ Basically it appears like a B64 string, So may be you are confused due to this. ]
To be honest your extension of encryption is super awesome. but if we encrypt that inside our app, then it wonāt make any sense.
So here i have splited the security system into 2 set client and serverā¦ were you conert your data/key/api/url etc into a key which my server generatesā¦ and then you put it inot your apkā¦ and here you use my extension which then converts back that key into the data/api/url/key etc into actual data
So if your api key is ABCDE00123
itāll convert this data into a key
Now you keep this data into your server as key/api/url/secret etc
and use the key into the apk were before you make request to your server key/api/url etc itāll get converted back into the actual data [ i.e : ABCDE00123 ]