Android GCM Sync

I start my journey with the Android GCM Framework ..

This is actually pretty pretty and easy to implement, but one important question:

The data I transmit is not sensitive, but still I do not want it to be available to everyone ..

Is it encrypted somehow? or should I encrypt my messages?

I know that his notification service is mainly - but I send short messages, so it’s important for me to understand how these messages are transmitted by Google,

Thanks!

+7
source share
2 answers

Is any method encrypted?

Google uses encryption over the air, between your server and its (SSL), and between their server and device. Therefore, the only systems that have access to GCM message data are:

  • your server
  • your subscriber device
  • Google

should I encrypt my messages?

It depends on whether you trust Google or what the nature of your message is. For example, if the message payload cannot be used directly by Google (for example, it's just a flag telling your application to sync using the normal web service protocol), then encryption may not be required.

+9
source

Encrypting / decrypting the message payload is what you would need to do on the side of your service and client application. Thus, everything that passes through GCM is safe, Google will not be able to see what's inside.

However, keep in mind that decryption in a client application can be an expensive process - you will need to wake up the application and decrypt what will cost you some battery.

0
source

All Articles