防止基于HTML5游戏的实时浏览器进行时间作弊

Question

I am programming a Go server (chess-like game), in html5 (javascript). Like Chess, each player is given initial thinking time at the start of the game.

I use the Google App Engine platform. (Current Beta url http://tingting39546.appspot.com/games )

Let's say each player is given 600 seconds thinking time for their moves.

• Was would be my options to prevent players messed around with their clocks?

So far, my best guess would be to let the clients send the times used for each moves, and let the server compare this to what would be reasonable considering the latency.

• Can i use encryption schemes to make this cheat-proof?

Answer 1

Maintaining such validations client-side is not the right way. You need to maintain all states server-side, client shouldnt calculate anything time-related, server just receives commands and uses the request time stamp to calculate such things.