Search code examples
erlangxmppejabberdquickblox

Security - Ejabberd - Validate Client

I have installed Ejabberd in our AWS Server

We are developing an iOS messenger app and we don't want other clients to access our messaging server other than our iOS app.

All the ejabberd services should be accessible only by our iOS app,

  1. To register
  2. To login
  3. To send message and use any other service.

What are all the configurations and settings should I have to do to secure our server?

Solution

  • There is no 100% way to disable other clients from mimicking your own client. You may use different protocol, or one more layer of encryption or special marks that allow your server use to make sure that client is yours. But if someone will have desire to write his own client, he'll use your own client to understand what should be sent on the wire.