"Security" of custom license fields

Hi guys,

I would like to know if the "custom license fields" are securely stored and transported?

Is there a possibility for another tools aside TurboActivate to read the "custom license fields" on a local PC (like with a text editor, etc.)? On TurboFloat when the client station ask for a "custom license field value", is it passed in clear in the TCP protocol?

The reason I ask is that our software uses a password to secure the database of a customer. This key the customer has to save it somewhere if ever he has a DB disaster for it will be required to restore the backup. Now I thought to offer our customers to keep a secured copy of their key on our servers. A suggested method is to use a custom license fields to store their database key right there with their software key. (Of course, the other approach is to handle all this ourselves with an SSL "WebService" and secure database.)

Now, you can tell me if this is a good practice of if their can be security breaches with this approach.

Thank you very much for your feedback!

Best regards,Alexandre Leclerc

They're stored in "plaintext" on the computer that the activation data is on. (It's cryptographically signed, so it can't be modified, but it's readable from someone with moderate skills).

On TurboFloat when the client station ask for a "custom license field value", is it passed in clear in the TCP protocol?

Currently (v3.5.6), yes. We assume TurboFloat / TurboFloat Server are on a closed network. We know that's not always the case, which is why in an upcoming version all traffic will be encrypted by default. It won't be the next version, but soon after.

Hi Wyatt,

Thank you very much for this information. It will help us develop the best approach in the meanwhile. (Like crypt the data.)

This is a good idea to have the TF/TFS protocol crypted and signed to make sure the data is kept private and can't be tampered. (You imagine making a simple software that receives connection from TF and bridge the connection to TFS, then you can have fun will all the packets passing. Sounds like an interesting Friday afternoon project. )

Thank you very much for all your kind help,Alexandre Leclerc

Reply
Discard post