RE: [flexcoders] Re: localconnection data encrypted?

2009-01-29 Thread Seth Hodgson
no perfect solution here, but this reduces the attack surface. Again, not a concern for most apps. Best, Seth -Original Message- From: Seth Hodgson Sent: Wednesday, January 28, 2009 3:36 PM To: 'flexcoders@yahoogroups.com' Subject: RE: [flexcoders] Re: localconnection data encrypted? Sorry

[flexcoders] Re: localconnection data encrypted?

2009-01-28 Thread Pete Appleby
It would seem that there is a network connection being used, but I have not been able to find out for sure. The localconnection allows different versions of the Flash player to communicate via AMF0. This leads me to believe that the network is being used as opposed to a shared memory model. It

RE: [flexcoders] Re: localconnection data encrypted?

2009-01-28 Thread Seth Hodgson
likely do need to worry about are the gotchas mentioned in the blog post. Best, Seth From: flexcoders@yahoogroups.com [mailto:flexcod...@yahoogroups.com] On Behalf Of Pete Appleby Sent: Wednesday, January 28, 2009 2:45 PM To: flexcoders@yahoogroups.com Subject: [flexcoders] Re: localconnection

[flexcoders] Re: localconnection data encrypted?

2009-01-28 Thread Pete Appleby
Thanks for the info! I have not been able to find out much about this out there. I have implemented my localconnection between AIR apps like you describe, with Send and ack/nack from the receiving apps. This is all working great. I am passing data back and forth from one app to another. In my

RE: [flexcoders] Re: localconnection data encrypted?

2009-01-28 Thread Seth Hodgson
installed or something :) Best, Seth -Original Message- From: Seth Hodgson Sent: Wednesday, January 28, 2009 2:50 PM To: 'flexcoders@yahoogroups.com' Subject: RE: [flexcoders] Re: localconnection data encrypted? There's no network involved. More details here: http

Re: [flexcoders] Re: localconnection data encrypted?

2009-01-28 Thread Sam Lai
The only weakness I can see in this is that I am using the Encrypted Local Store to save the RSA keys. I intend to use this same technique in communicating sensitive with back end web services. Which brings up the next question: How secure is the Encrypted Local Store? If someone can get the