移动和.net平台之间的安全数据交换

Question

We are developing a product with .net web services and Android, iPhone, BlackBerry, Nokia, and Windows Mobile clients. The mobile apps are exchanging data with the server. For that exchange, I need to provide secure communication for the data. How do we do encryption and decryption between these different languages?

Answer 1

Just use an encrypted transport eg https.

Using https has lots of advantages:

• The encryption is all sorted for you, you just use the system services provided.
• It's easy to switch between http and https for debugging reasons.
• You don't get any problems for devices where you need to sign the application for a store, eg iPhone, if you include encryption in your application (other than transport encryption like https) you have to jump through more hoops and have a lot longer wait to get it into the appstore.