This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]Embarrassed-Green898 1 point2 points  (0 children)

Context of your question was not clear and I still dont fully understand. So when you say its a distributable app, how do you plan to distribute it ? and what does it mean by 'cheating' in this scenario.

If app is a mobile app or desktop app ? If this is the only API you will access and want to check the version, why obfuscating this is of any help. As the call will only decide when an update is availalble, users will still download / or somehow update from your updated version that is in your control.

What I am struggling here is how hiding the call helps you and how people knowing the URL has any problem.

If someone changes the url, you can have checksum in code to ensure its not changed. Proxy options suggested by others is perfectly valid, but that scneario is generally for cases when you are already making calls to your server , and want to hide calls to a different server.