how secure is NSURLConnection over https

2019-07-28 02:23发布

I've been reading through a number of questions on this site regarding NSURLConnection and https, but most relate to "untrusted" certificates and how to allow them nonetheless. My question is a little more basic. I am building an app for a client who handle online donations, and I would like to load their donation script using an NSLURLRequest and POST the values of credit card details (entered in the app). Does NSURLConnection (when connecting to a https url) ensure the encryption of those details as they are sent to the donation script on my clients server? Sorry if this is a basic question, I just couldn't find a place in the apple docs that guaranteed this.

2条回答
唯我独甜
2楼-- · 2019-07-28 02:50

Requiring trusted certificates prevents impersonation and man-in-the-middle attacks. The encryption will be as secure as the server requires.

查看更多
一纸荒年 Trace。
3楼-- · 2019-07-28 02:51

Yes, if you are using HTTPS authentication all communication to the server is encrypted.

Try to be sure the server side is not storing the credit card information ANYWHERE, even temp directories. It is far, far more likely the server will be hacked and credit cards taken that way than anyone would intercept iPhone traffic.

查看更多
登录 后发表回答