Hi,
I'm looking to implement time based licenses in to our products, came across the thread bellow, and have some questions.
https://wyday.com/forum/t/1775/settings-trial-days-to-zero-rental-license/
To ensure that the local clock is not tampered with, we need to implement ourselves some validations, by contacting e.g. a known ntp server.
But that creates a kind of a problem, in order to validate the current time, internet connection needs to be available, if it is not available, then we could store some state, and implement a similar solution to nDaysBetweenChecks, nGraceDaysOnInetErr, but for checking the present date.
But that still leaves a vulnerability, if I modify the file where I've stored the state ...
Is there any possibility that you add this kind of functionality? I'm assuming it would be simple, and that you are already managing local state tampering protection when dealing with nDaysBetweenChecks, nGraceDaysOnInetErr...
Thanks, Best Regards
If you use TA_IsDateValid() it does do some rudimentary client-side fraud detection. In TA 4.1 we're adding more fraud detection.
However, client-side fraud detection is imperfect and always will be imperfect. That's the nature of doing things completely client-side.
