Event Push Notification Authenticity

Hi folks,

Checking to see if there's a way for us to confirm that the communication to our server is authentic.

I understand I can use basic authentication, but assuming those credentials are compromised, is there another way?

I was wondering if the "customer[id]" that's passed is something we can decrypt. Or is it just an internal CheddarGetter code?

Thank you,

Rahul

  1. You can use the customer id to do a customer data lookup. Since a UUID is virtually impossible to guess or spoof, I'd say that's a pretty reliable method.

  2. So simple.

    Thank you.

  3. Marc Guyer closed this discussion on 15 Jun, 2011 03:03 PM.

Discussions are closed to public comments.
If you need help with Cheddar please start a new discussion.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac

Recent Discussions