Contracting out an API - comments on the spec, or even a bid?

Re: Contracting out an API - comments on the spec, or even a... by ErikHuisman on Sunday June 12, 2011 @09:17PM (#2647799)

So basically only one user can login per UUID? There are no means of unregistering the device? A user can log in on multiple devices but can't logout. Also store the APNS key @ device_register you might wan't to sent pushes in the future. Put password in basic auth and use ssl (at minumum)..

[ Parent | on HN ]

Re: Contracting out an API - comments on the spec, or even a... by andrewljohnson on Sunday June 12, 2011 @09:35PM (#2647822)

Yes, one user per UDID for now. If you want to unregister a device, you can email me, and if we get multiple requests, we'll code a solution.

Storing APNS sounds like a good idea.

As for security, I am ok that this would be susceptible to a wifi sniffer. We will note that it is insecure for users, but they won't care. If we get a bid that implements security, we'll consider it, but I'd rather have it work than be secure.

[ Parent | on HN ]

Re: Contracting out an API - comments on the spec, or even a... by AretNCarlsen on Monday June 13, 2011 @12:32AM (#2648139)

> We will note that it is insecure for users, but they won't care. ... I'd rather have it work than be secure.

I would have an easier yet more profitable life if I could manage to adopt that attitude for my projects.

[ Parent | on HN ]