Event Push Notification Authenticity
Hi folks,
Checking to see if there's a way for us to confirm that the communication to our server is authentic.
I understand I can use basic authentication, but assuming those credentials are compromised, is there another way?
I was wondering if the "customer[id]" that's passed is something we can decrypt. Or is it just an internal CheddarGetter code?
Thank you,
Rahul
Discussions are closed to public comments.
If you need help with Cheddar please
start a new discussion.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Marc Guyer on 15 Jun, 2011 02:56 PM
You can use the customer id to do a customer data lookup. Since a UUID is virtually impossible to guess or spoof, I'd say that's a pretty reliable method.
2 Posted by rahul on 15 Jun, 2011 02:59 PM
So simple.
Thank you.
Marc Guyer closed this discussion on 15 Jun, 2011 03:03 PM.