Mailing-List: contact dev-help@cordova.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cordova.apache.org
Received-SPF: pass (nike.apache.org: domain of csantana23@gmail.com designates
 209.85.223.170 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAOBL_k6SNXAp8Bz_KHAW7MUUkur-yp1vMh8P_ZZqJ1HQAotvLQ@mail.gmail.com>
References: 
 <CAPc=M1KSPUp_2hLfUS2coqqNTWtHSOWojh+aHMX_iiCJLeS-6A@mail.gmail.com>
	<CAOBL_k6SNXAp8Bz_KHAW7MUUkur-yp1vMh8P_ZZqJ1HQAotvLQ@mail.gmail.com>
Date: Fri, 13 Feb 2015 17:39:28 -0500
Message-ID: 
 <CAHYtTqkEidu_BHfH6=y9TG22XgvZ1Qhnpywmbx7e-ULx648DEA@mail.gmail.com>
Subject: Re: Cordova generated .apk file encrypt
From: Carlos Santana <csantana23@gmail.com>
To: "dev@cordova.apache.org" <dev@cordova.apache.org>
Content-Type: multipart/alternative; boundary=047d7bdca2f4cde8ba050effe88d

--047d7bdca2f4cde8ba050effe88d
Content-Type: text/plain; charset=UTF-8

Danish,
  Like Joe said you can't encrypt your web code (i.e. javascript), at the
end of the day it needs to be parse by the webview in plain text.

Most you can do is obfuscate by using a tools like [1] uglifyjs to remove
comments, and do minification, their are others this is just one.
you can run uglifyjs automatically using a cordova cli hook, you can take a
look here how people are using hooks in their cordova workflow

[1]: https://github.com/mishoo/UglifyJS
[2]:
http://devgirl.org/2013/11/12/three-hooks-your-cordovaphonegap-project-needs/

On Fri, Feb 13, 2015 at 1:54 PM, Joe Bowser <bowserj@gmail.com> wrote:

> Why is this a problem?  We currently do not support this use case and do
> not have any plans to as far as I'm aware.  Anyone can unzip any APK and
> dedex the code to see the Java as well.  This often leads to hilarious
> commentary on profanity in what people believed would be private code.
>
> If you have code that you wish to have secret, you really need to make sure
> that logic exists entirely on the server side under your control.  Trying
> to use cryptography to hide your code on an Android project is probably
> just going to end in tears.
>
> On Fri Feb 13 2015 at 10:50:47 AM Danish Khan <amdk2011@gmail.com> wrote:
>
> > HI,
> >
> > First i would like to thank you for creating cordova. I have made one
> > application which is based on jquery mobile base in cordova. The only
> issue
> > is i want to encrypt .apk file because any body can change .apk extension
> > to .zip file & can view all the assest folder html files. i want to
> encrypt
> > that please guide me and help how can i encrypt that files.
> >
> > Your earlier reply will be highly appreciated
> >
> > Thanks & Regards,
> >
> > Danish
> >
>


-- 
Carlos Santana
<csantana23@gmail.com>

--047d7bdca2f4cde8ba050effe88d--