ubuntu-push-devs team mailing list archive

[John Lenton <john.lenton@xxxxxxxxxxxxx>]

On Thu, Aug 8, 2013 at 6:06 PM, Lucio Torre <lucio.torre@xxxxxxxxxxxxx> wrote:
> On Thu, Aug 8, 2013 at 1:29 PM, John Lenton <john.lenton@xxxxxxxxxxxxx>
> wrote:
>>
>> 3. [NOT IMPLEMENTED] the client-side daemon needs to verify that the
>> create_registration call came from the app it's purported to be coming
>> from. Easiest way I can think of is to do a second call over dbus,
>> back to the app (rather like the other calls the client-side daemon
>> does to the app), with some kind of challenge/response.
>
> Do we need this? If in step 5 we just give the registration to the right
> app, we dont care who initiated the request.

if we aren't going to limit the number of registrations per appdev, sure.