4 ms·
If I understand your solution, what's keeping Person A from restoring from an earlier backup where the access was still valid? Or even sharing the backup with a
by BoppreH 13y ago
If I understand your solution, what's keeping Person A from restoring from an earlier backup where the access was still valid? Or even sharing the backup with all the games available?
- just2n 13y agoThe tokens would be signed with an expiration, so if they backed up to a time when they had a valid "access" token, the verification would fail (assuming the device has an internal chronometer that the user can't modify). If they were to lend the game to a friend, then back up to a time before they lent the game, there could be a problem. So it'd be up to the backup software with access to the sensitive storage being smart enough not to cause that problem. Alternatively, backups and restores could require an internet connection.