Android Question decode and encode URL

[ViNaTa]

I have a URL to send request post and else...
But i want to nobody find it :/
So i think its better to encode it and when it want to send request change to decode like I put my apilink as B64 and when it want to send request change to manually

 

[Erel]

Put the string in Process_Globals and compile the app with release (obfuscation). It will make it a bit more difficult to find the url.

 

[ViNaTa]

Put the string in Process_Globals and compile the app with release (obfuscation). It will make it a bit more difficult to find the url.

Thanks.But they can sniff it:/

 

[sfsameer]

Thanks.But they can sniff it:/

Hello,

No matter how much you try to hide the URL anyone can find it out easily by activating a proxy on the device and it will capture all the outgoing packets or on a rooted device (HTTPToolkit)

The right approach is to encrypt the parameters that you are sending using AES CBC and decrypting the parameters on the server using using AES CBC and a Master Key.

So even if they found out the URL they can't do anything with it because it's secure.

The 3 keys you will need to generate are :
1- Private key
2- Public key
3- Master Key (Generated/Used on the Server side only)

Once you filter the requests you will be able to see if it's a legit request from the app or a hacker trying to hack/penetrate/crack the data on your server.

 

[Sandman]

But i want to nobody find it :/

Can you explain why the url is sensitive and you want nobody to find it?

 

[AnandGupta]

Can you explain why the url is sensitive and you want nobody to find it?

Yes, I am also wondering why @ViNaTa so worried to hide the url.
As Saif explained, it is the parameters which are of importance. Say gmail (https://accounts.google.com/) this url id of no use till you can get the parameters which is sent to it.

 

[ViNaTa]

No my app is like security or like control all phone from a one app so Im worried to anybody can hack my app website etc...