Thanks for the info! I have not been able to find out much about this
out there.

I have implemented my localconnection between AIR apps like you
describe, with Send and ack/nack from the receiving apps.

This is all working great. I am passing data back and forth from one
app to another. In my first case we have an order entry system. The
second app is a financial calculator. I can push the info back and
forth if needed to calculate the financing. Both apps can be used
standalone, but it is great to have them working in tandem when needed.

Since I was not able to find the answer, I have used the as3crypto
library to implement RSA encryption. The two apps do a quick handshake
of public keys at the beginning, then all remaining Sends are encrypted.

The only weakness I can see in this is that I am using the Encrypted
Local Store to save the RSA keys. I intend to use this same technique
in communicating sensitive with back end web services. Which brings up
the next question: How secure is the Encrypted Local Store? If someone
can get the private key from there, it's all for nothing.

Thanks!

Pete


Reply via email to