让您的Android应用程序的应用内购买流程更难破解的最佳做法?

我应该遵循哪些步骤来减少在
Android应用程序中非法激活和使用应用内功能的可能性?

可能无法击败它,但是,应该有一些基本的步骤,至少过滤掉孩子……

最佳答案 您可能希望至少尝试模糊您的公钥,以便攻击者不能简单地反编译您的应用程序并查找静态字符串.

Android开发者网站对此有一些想法:

Protect your Google Play public key

To keep your public key safe from malicious users and hackers, do not
embed it in any code as a literal string. Instead, construct the
string at runtime from pieces or use bit manipulation (for example,
XOR with some other string) to hide the actual key. The key itself is
not secret information, but you do not want to make it easy for a
hacker or malicious user to replace the public key with another key.

http://developer.android.com/google/play/billing/billing_best_practices.html

点赞