Comment Comment by CiPHPerCoder You don't need to know what the server does with your data if the client is encrypting it properly.The client-server architecture is irrelevant here.Read this, then flip the roles: https://paragonie.com/blog/2016/03/client-authenticity-is-no...Reverse engineer the client-side app. You now know what the client-side app (the part that people want to be open source) is doing. You don't need to know what the server's code is doing. parent CiPHPerCoder 9 years ago
The client-server architecture is irrelevant here.
Read this, then flip the roles: https://paragonie.com/blog/2016/03/client-authenticity-is-no...
Reverse engineer the client-side app. You now know what the client-side app (the part that people want to be open source) is doing. You don't need to know what the server's code is doing.