ubuntu-push-devs team mailing list archive

[Lucio Torre <lucio.torre@xxxxxxxxxxxxx>]

On Thu, Aug 8, 2013 at 1:29 PM, John Lenton <john.lenton@xxxxxxxxxxxxx>wrote:

> 3. [NOT IMPLEMENTED] the client-side daemon needs to verify that the
> create_registration call came from the app it's purported to be coming
> from. Easiest way I can think of is to do a second call over dbus,
> back to the app (rather like the other calls the client-side daemon
> does to the app), with some kind of challenge/response.
>

Do we need this? If in step 5 we just give the registration to the right
app, we dont care who initiated the request.

Lucio.