Don't worry about the terminology -- "ad hoc wifi network" is what you're 
looking for. I just wanted to figure out what you intended to say.

Hmm, "peer-to-peer" and "sensitive financial data" has me a bit concerned.

I don't advocate sending sensitive data, via servers or not, unencrypted. I 
hope you're using some sort of public key encryption, with a secure key 
exchange, such as Diffie-Hellman. If all I have to do is eavesdrop on your 
NFC communications.... (The role of the public key encryption part is to 
give you a way to strongly identify the recipient you're exchanging the 
encryption keys with).

And recognize that phones can be lost or stolen; that poses an upper limit 
of how secure they are. In fact, ideally, really sensitive data wouldn't be 
stored on the phone at all.

Seriously, I would not consider an intermediate server to be a security 
issue in the slightest. The reason is -- you should always assume that the 
communication itself can be intercepted. If you don't store it on a server 
temporarily -- the attacker may, so that he can attack it at leisure, with 
as much computer power as he wants.

(That assumes it's only on the server for a short time, as part of the 
communication process. If you store large amounts of secure communications 
long-term, you become a whole different type of target).

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to