Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Feature] Obfuscate or Encrypt the FeatureCache.txt on GrowthBook-KMM #164

Open
argaasasta opened this issue Jan 22, 2025 · 8 comments
Open

Comments

@argaasasta
Copy link

Is it possible to encrypt the FeatureCache.txt on GrowthBook-KMM

Image

Because this file can contain the User Phone number or User id that sensitive

Image

@vazarkevych
Copy link
Collaborator

Hi @argaasasta. Please let us check that.

@argaasasta
Copy link
Author

@vazarkevych i try to create the fix on here #165

@Bohdan-Kim
Copy link
Collaborator

Are you able to consider PRO?

@argaasasta
Copy link
Author

@Bohdan-Kim is the PRO will encrypt this cache, so it not visible to pentester?

@Bohdan-Kim
Copy link
Collaborator

@argaasasta Yes, the endpoint response will be encrypted. You'll need to pass encryption key into SDKBuilder in order to setup encryption

@argaasasta
Copy link
Author

argaasasta commented Jan 30, 2025

@Bohdan-Kim we use this Growthbook for FE and BE, will BE need the Encryption Key too? just for read the value from GrowthBook?
I think this encrypt on local cache should be on the not PRO too, since it only affect android

@Bohdan-Kim
Copy link
Collaborator

@argaasasta what FE, BE means?
Whether encrypt on local cache should be on the pro or not, should be discussed with maintainers

@Bohdan-Kim
Copy link
Collaborator

If the user of the SDK doesn't want to have a cache in file, user disables caching

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants