How to use connectWithId without disabling CHAPS security ?

MIP
, , ,
1

I would like to use connectWithId to restore a connection after a navigation but I have not find how to make it work without disabling CHAPS using the following code :

XPMobileSDKSettings.supportsCHAP = false

Can I have an example code or an explanation on how to make it work with CHAPS enabled.

2

Hi Denis,

I don’t believe “connectWithId” was designed with that possibility in mind (usage of Chap).

And to be honest all the tricks in the protocol as DHKE, CHAP support, commands / parameters encryption, etc could only provide anti-sniffing protection.

But non of them could handle man-in-the-middle attack for example.

My point is that you have to configure HTTPS in the Mobile server and could disable CHAP support without any further worries.

3

Hi Petar,

Thank you for the reply. I will do that and rely on HTTPS.