GeoNames Home | Postal Codes | Download / Webservice | About 

GeoNames Forum
  [Search] Search   [Recent Topics] Recent Topics   [Groups] Back to home page 
[Register] Register / 
[Login] Login 
Signing commercial requests?  XML
Forum Index -> FAQ - frequently asked questions
Author Message
squirrel



Joined: 04/03/2009 04:59:41
Messages: 3
Offline

Hi, I'm interested in using the commercial services in an environment where it would be trivial for a malicious user to discover the identifying token as passed in the HTTP GET request via the Java client library... is it possible to access the commercial service in such a way such that the request is signed with a private key, rather than exposing a token to the world? Thanks!
marc



Joined: 08/12/2005 07:39:47
Messages: 3993
Offline

If you are using accessing the service from a fix set of ip addresses then you can restrict access to those. Private keys are not supported.

Best


Marc

[WWW]
squirrel



Joined: 04/03/2009 04:59:41
Messages: 3
Offline

I'm not, unfortunately. (My use case is an Android application for which the free servers are too slow / down too often.) Do you have another suggestion, or is there any chance of this being implemented for commercial use? (I'd be willing to implement it even... should be only a few lines of code assuming a DSA library is available.)
marc



Joined: 08/12/2005 07:39:47
Messages: 3993
Offline

you could use the secure server and send the token as post parameter. Then you are protected against sniffers.

Marc

[WWW]
squirrel



Joined: 04/03/2009 04:59:41
Messages: 3
Offline

Ah! Beautiful idea, thank you!
tigrushke



Joined: 27/07/2009 21:44:21
Messages: 1
Offline

Hi, could anyone show the example of how can I use the secure server and send the token as post parameter? Thanks in advance!
marc



Joined: 08/12/2005 07:39:47
Messages: 3993
Offline

The secure server is only available for commercial users and the implementation depends on the programming language you are using. Consult the documentation of your programming language to see how to implement a post request.

Best

Marc

[WWW]
 
Forum Index -> FAQ - frequently asked questions
Go to:   
Powered by JForum 2.1.5 © JForum Team