Basic Packet Encryptation

Post here your suggestions for new possible features in SmartFoxServer.

Moderators: Lapo, Bax

Post Reply
frosttec
Posts: 11
Joined: 01 Nov 2007, 12:53

Basic Packet Encryptation

Post by frosttec »

I'm worry with my apps because i have sniffed the xml packets and its realy easy to use reversed enginery.is it possible to create a automatic encryptation of this packets?
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Post by Lapo »

You can capture your own packets thats okay but how are you going to capture mine, or those of another users and alter them? :) That's really very difficult because each connection is unique and persistent for each session.

Anyways, you can use the raw protocol from server side and use a less intelligible format if you need it.
You could also use binary data and real encryption by following the lines of this tutorial -> http://www.smartfoxserver.com/docs/docP ... /index.htm

For more details about security check this article -> http://www.smartfoxserver.com/docs/docP ... mmo_p2.htm
(scroll down a bit)
Lapo
--
gotoAndPlay()
...addicted to flash games
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Post by Lapo »

p.s. = Btw, encryption will be part of the next major SFS release
Lapo
--
gotoAndPlay()
...addicted to flash games
frosttec
Posts: 11
Joined: 01 Nov 2007, 12:53

Post by frosttec »

thx lapo for the asnwers
ptdgames
Posts: 39
Joined: 10 Mar 2008, 21:55

Post by ptdgames »

Excellente on the upcoming encryption. My major worry is that people will spoof packets on the way to the server.

Of course, it's so easy to simply decompile a SWF these days that I'm not sure if encrypting the packets will do much. :(
ptdgames
Posts: 39
Joined: 10 Mar 2008, 21:55

Post by ptdgames »

Even if you encrypt the packet, somebody is going to decompile your SWF and get the encryption codes.

Keep this in mind, you'll only be keeping the "average guy" honest. The cheater is still going to cheat you.
Post Reply