ac4android
Well-Known Member
If my user has to send the password via Android using HttpURLConnection, is URLEncoder the appropriate level of security?
Perusing the documentation, it doesn't look like much:
"All characters except letters ('a'..'z', 'A'..'Z') and numbers ('0'..'9') and characters '.', '-', '*', '_' are converted into their hexadecimal value prepended by '%'. For example: '#' -> %23. In addition, spaces are substituted by '+'."
Are there anything better that I should look at?
Are banks really using only URLEncoder for encryption for customer access using Android?
Perusing the documentation, it doesn't look like much:
"All characters except letters ('a'..'z', 'A'..'Z') and numbers ('0'..'9') and characters '.', '-', '*', '_' are converted into their hexadecimal value prepended by '%'. For example: '#' -> %23. In addition, spaces are substituted by '+'."
Are there anything better that I should look at?
Are banks really using only URLEncoder for encryption for customer access using Android?
