Tech
A local app cannot keep a secret from its owner, so stop pretending
Our desktop app has a paid upgrade. Somewhere in the code there has to be a boolean that decides whether the feature is on. Here is the comment sitting above it:
* Note this is a speed bump, not DRM. A local Electron app cannot keep a secret
* from its owner, and this file is plain JSON. Anything that must not be forged
* has to be enforced server-side.
I want to defend writing that down, because the instinct is to do the opposite — encrypt the file, obfuscate the bundle, ad...
Read the full discussion on Dev.to
This article was aggregated from Dev.to. Click to join the conversation.
View on Dev.to