该应用程序会对用户或设备或商店的安全性或功能造成风险。应用无法以纯文本形式传输密码。 [英] The app poses a risk to users or to the security or functionality of the device or the Store. Apps cannot transmit passwords as plain text.

问题描述

您好，

我们的内部应用程序最近被标记为不合规，我们已经重新提交了以下更改

Our internal app recently being marked as non-compliant, which we already resubmitted with the following changes

- 通过HTTPS安全地与服务器通信

- communicate securely to the server via HTTPS

- 密码现在在发送到服务器之前被加密

- password now being encrypted before sending to the server

不幸的是，它仍然会出现同样的问题。

Unfortunately it's still coming back with the same issue.

有人可以就此提出建议吗？

Would someone please able to advise on this?

请注意，我们已经在"隐私政策网址"中设置了隐私政策文件。

Please note that we already have a privacy policy document set up in "Privacy Policy URL".

谢谢

最好的问候

推荐答案

你好Pulse 2，

Hi Pulse 2,

根据您提供的错误信息， 也许您的密码加密存在一些问题。我发现

类似案例 客户成功使用RC4而不是HTTPSecureSocket。它是 对称加密算法 ，相同的密码加密和
解密，你可以试试。

这是
源代码 供您参考。

如果您在尝试上述方式时仍遇到相同问题，请联系
开发中心支持，以便更好地解决您的问题。

Based on error info that you provided,  maybe there are some problems in your password encryption. I find the similar case that customer used RC4 over HTTPSecureSocket successfully. It is asymmetric encryption algorithm, the same password encrypts and decrypts, and you could try it.
Here is a source code for you reference.
If you still experience the same issue when you have tried this way above, please contact Dev Center Support in order to solve your issue better.

最好的问候，

Cherry Bu

Best Regards,
Cherry Bu

这篇关于该应用程序会对用户或设备或商店的安全性或功能造成风险。应用无法以纯文本形式传输密码。的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！