It's implemented in the library. Cache contents are protected using a swappable Obfuscator class. We include a standard obfuscator implementation that encrypts cache data using AES-256 and an application-specific key, along with a copy of the device ID. This prevents tampering with cache data, or replaying it across applications/devices. Developers are also free to implement their own Obfuscator if they so choose. (The cache itself contains timestamp data, so there's no point in replaying the cache data for the same application on the same device.)
-- Trevor Johns Google Developer Programs, Android http://developer.android.com On Tue, Jul 27, 2010 at 1:31 PM, Kostya Vasilyev <kmans...@gmail.com> wrote: > Is caching implemented in the library or in the Market app? > > I am concerned about potential abuse, such as replacing cache contents. > > -- > Kostya Vasilyev -- http://kmansoft.wordpress.com > > 28.07.2010 0:23 пользователь "Trevor Johns" <trevorjo...@google.com> > написал: > > > Developers can chose whether to implement response caching or not. > > Assuming caching is enabled, we require a network connection for the first > license check, but then the user can go offline for a period of time before > requiring another license check. > > -- > Trevor Johns > Google Developer Programs, Android > http://developer.android.com > > > > On Tue, Jul 27, 2010 at 1:19 PM, Kaj Bjurman <kaj.bjur...@gmail.com> > wrote: > > > > I saw that entry, ... > > -- > You received this message because you are subscribed to the Google > Groups "Android Developers" g... > > -- > You received this message because you are subscribed to the Google > Groups "Android Developers" group. > To post to this group, send email to android-developers@googlegroups.com > To unsubscribe from this group, send email to > android-developers+unsubscr...@googlegroups.com<android-developers%2bunsubscr...@googlegroups.com> > For more options, visit this group at > http://groups.google.com/group/android-developers?hl=en > -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to android-developers@googlegroups.com To unsubscribe from this group, send email to android-developers+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
