[Interest] wss:// on localhost

[Alexander Carôt]

> I repeat: whatever you do, don't ship a private key.

Allright - will consider alternative ideas.

Best

Alex

--
http://www.carot.de
Email : Alexander at Carot.de
Tel.: +49 (0)177 5719797


> Gesendet: Montag, 03. August 2020 um 00:28 Uhr
> Von: "Thiago Macieira" <thiago.macieira at intel.com>
> An: interest at qt-project.org
> Betreff: Re: [Interest] wss:// on localhost
>
> On Sunday, 2 August 2020 11:43:42 PDT Alexander Carôt wrote:
> > P.S.: Also I don't see a way to get access to the key - it is compiled into
> > the binary and on top of it it's triple-secured/encypted.
> 
> Very easy to put a breakpoint in your code after it has decrypted the key. 
> Especially if you're using Qt classes or OpenSSL from a DLL. I agree it's not 
> every user that will know how to do it, but I bet most people on this mailing 
> list could do it if they wanted to.
> 
> I repeat: whatever you do, don't ship a private key.
> 
> -- 
> Thiago Macieira - thiago.macieira (AT) intel.com
>   Software Architect - Intel DPG Cloud Engineering
> 
> 
> 
> _______________________________________________
> Interest mailing list
> Interest at qt-project.org
> https://lists.qt-project.org/listinfo/interest
>