Proper use of serverside verification
Posted: Fri Nov 08, 2013 5:40 pm
Hello,
as i can see the only available way to use registration keys is by using that offline algorithm.
Unfortunately we need to sell our keys on a online site (unfortunately we also can't use a special algorithm cause our application gets reselled too).
Now i ask myself what would the proper way to handle this.
I guess the solution would be to do this check directly in the protected file by creating a own prompt (for the key) and send this key to our servers in order to verify them.
But there is one problem. Network sniffing & manipulation.
How could we handle this properly?
Thank you very much.
as i can see the only available way to use registration keys is by using that offline algorithm.
Unfortunately we need to sell our keys on a online site (unfortunately we also can't use a special algorithm cause our application gets reselled too).
Now i ask myself what would the proper way to handle this.
I guess the solution would be to do this check directly in the protected file by creating a own prompt (for the key) and send this key to our servers in order to verify them.
But there is one problem. Network sniffing & manipulation.
How could we handle this properly?
Thank you very much.