DEV Community

Discussion on: Cryptography for programmers 4: Public key crypto and Protocols

Collapse
 
baldhead69 profile image
baldhead69 • Edited

Thank's @shierve , great article.

I am developing a embedded(esp32) websocket server a while and now i want to add a user authentication.
I am using okhttp lib on a simple(for now) android app that i coded how client side.
I already use https/wss for communication, but in android app, the function "hostname verifier" are returning only true for now.

I am using only local network, but i want that the server work over the web too(cloud server communication).

Do you have any suggestion or lib to encrypt the authentication in a very secure way ?
The framework, esp-idf, use basically pure c language.
I was thinking in authenticate before handshake finish, ie, before protocol switch.

Thank's.