I usually wonder how my iPhone apps communicate with their servers. I had a debate with my ex-coworker about the security of app communication. He thinks we can use simple HTTP protocol for app communication, including authentication. But I insist that we should use more secure way for transmission in apps.

Let me use an example to demonstrate how little an app protects the content and how easy it is to monitor the traffic of an iPhone app.

According to Apple’s document here. I choose tcpdump and take 7-11 Taiwan app as an example.

This app provides coupon for Starbucks. I want to get the content of this coupon.

The steps are as following :

• 生產力軟體(Productivity)

• SizeUp：多視窗管理，很方便 (免費使用，會跳Demo視窗，但不礙事)

• Mou：Markdown 即時預覽編輯器

• Dash：快速Snippets與文件查詢工具 (2012之後會一直叫你花NT300買不然就會一直干擾…請謹慎) 瀏覽器(Browser)

• Firefox

• Chrome

• Chrome Canary : For Web Developer Only, power new future chrome* 儲存(Storage)

• Dropbox : Best Cloud File Storage

• SkyDrive：Microsoft Cloud File Storage 因為有之前活動獲得的25G，所以還是用一下。

• Google Drive : Google Cloud File Storage* 開發與編輯器(Development & Editor)

• Sublime Text：我最愛的純文字編輯器，設定可以參考這篇

• SmartGit：目前覺得最好用的Git Client (SourceTree把我repo搞爛過…)
• Evernote : 日常生活必備的筆記App
• HTTP Client* : 視覺模擬HTTP Request用

• XCode：iOS Development* 網路與多媒體(Network & Mutimedia)

• 好照片：方便的照片特效處理軟體

• FireAlpaca : 免費的圖像編輯軟體
• Skitch：螢幕截圖軟體，附上基本畫筆可以標記
• KKBox* : 到處聽音樂，不用下載占空間 (支持台灣軟體發展！高雄Oh~Ya)
• VLC Player : 目前找到最通用的Video Player
• HandBrake : 步驟很簡單的影片轉檔軟體

• iGetter : 續傳軟體* 終端機相關(Terminal)

• Go2Shell：可以直接在Finder上開啟該目錄的Terminal

• iTerm2：加強版Terminal，自動完成/畫面切割對於CLI愛好者很適合* 社交軟體(Social)

• TweetDeck：Twitter Client, 管理多帳號的時候很方便(我還有jsdc.tw的帳號…)

• Skype : 微軟沒了MSN，只剩下他了
• Line : 目前最夯的即時通訊App* 系統軟體

We all know that Apple provides an easy way(OTA - Over The Air) to distribute your in-house application through a simple web link like following.

<a href="itms-services://?action=download-manifest&url=http://example.com/maniifest.plist">Install App</a> 

Sure, we can use the same way to update the app. That means we have to send a email or url to our device owner, then they can click it. But in my case, we serve some people who are very busy. Thus we need a faster to update the app.

Usage : 
Simply One Tap on the AutoUpdate Icon

How to : 
1. Create a html file with following code

2. Add it to the home screen.

Download:
ota-test.zip - This zip include the sample app-touch-icon, sample-plist, and sample html.