通过 http 安全上传 Android 服务器数据
我正在构建一个应用程序，用于在 Android 和特定服务器之间创建 http 连接。我使用 JSON 传输数据，一切进展顺利，但现在我正在尝试保护连接，我的意思是我不希望第三方查看正在上传的数据。服务器不使用SSL证书，所以我目前正在考虑如何实现安全连接。到目前为止我有两个想法：
- 创建一个自签名证书并将其放在服务器文件系统上。 htis 的问题是服务器所有者不希望我探究他的系统。我不想与他就此问题进行辩论。
- 使用 Jsch（或其他）SSH 库创建安全连接。问题是，我以前从未使用过 SSH。
你有什么建议吗？还有其他选择吗？
I am building an app that creates a http connection between Android and a specific Server. I transfer data using JSON and all is going well, but now I am trying to secure the connection, by which I mean I don't want a third party to view the data being uploaded. The Server doesn't use SSL certificates and so I am currently thinking of how to implement a secure connection. So far I have two ideas:
- Create a self-signed certificate and put it on the server file system. Problem with htis is that the Server owner doesn't want me poking around his system. I'd rather not get into a debate with him about it
- Use Jsch (or other) SSH library to create a secure connection. Problem with thisis, I have never used SSH before.
What do you recommend? Is there another option?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
让他们在服务器上设置 SSL 并完成它。由于服务器必须解密数据，因此您需要在服务器上执行一些操作，无论是安装密钥和证书还是修改 Web 应用程序来解密数据。使用 SSL 是迄今为止最好的选择。 SSH 可能很棘手，而且与常规 HTTP(S) 相比，它们可能不太可能允许来自移动设备的 SSH 连接。
Get them to setup SSL on the server and be done with it. Since the server has to decrypt the data, you need to do something on the server, whether that is installing a key and certificate or modifying the web app to decrypt your data. Using SSL is by far the best option. SSH can be tricky, and they might be less likely to allow SSH connections from mobile devices than regular HTTP(S).