The intent of signed requests is just to confirm the request comes from orkut.com and comes from your own application. Otherwise, someone could develop a script making calls to your server in order to change some data. However, this not prevent one to build a browser script and flood your server from within the application.
Signed requests can be easily spoofed. If you use makeRequest with postParams, these params will be in plain text in the request. The only case they can't be spoofed is if you use https. On 20 abr, 13:34, Robson Dantas <biu.dan...@gmail.com> wrote: > Danilo, > > You need to use signed request, when your information is supposed to be > private and secured from request spoofing. > > A typical example could be some data being persisted in a database, where > you need to get opensocial owner id, for example. Basically, a signed > request will allow you to "protect" some information between your server and > the container. > > To have a more detailed tutorial, follow > this:http://wiki.opensocial.org/index.php?title=Introduction_To_Signed_Req... > > And of course, let me know if you have any doubt. > > Kind regards, > > Robson Dantas > > <http://wiki.opensocial.org/index.php?title=Introduction_To_Signed_Req...> > > 2010/4/19 Danilo Souza <souza.dan...@gmail.com> > > > > > > > Im building a flash app that talks to a server. I have been told to > > use signed requests to get my data. > > > Do I also need to use signed requests to get images, SWFs, css files > > etc.? > > > I will be calling those files from flash. > > > Thank you. > > > -- > > You received this message because you are subscribed to the Google Groups > > "Orkut Developer Forum" group. > > To post to this group, send email to opensocial-or...@googlegroups.com. > > To unsubscribe from this group, send email to > > opensocial-orkut+unsubscr...@googlegroups.com<opensocial-orkut%2Bunsubscrib > > e...@googlegroups.com> > > . > > For more options, visit this group at > >http://groups.google.com/group/opensocial-orkut?hl=en. > > -- > You received this message because you are subscribed to the Google Groups > "Orkut Developer Forum" group. > To post to this group, send email to opensocial-or...@googlegroups.com. > To unsubscribe from this group, send email to > opensocial-orkut+unsubscr...@googlegroups.com. > For more options, visit this group > athttp://groups.google.com/group/opensocial-orkut?hl=en. -- You received this message because you are subscribed to the Google Groups "Orkut Developer Forum" group. To post to this group, send email to opensocial-or...@googlegroups.com. To unsubscribe from this group, send email to opensocial-orkut+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/opensocial-orkut?hl=en.
