<div dir="ltr">Thanks, Brett.<div><br></div><div>The clinics use VPN, but didn't know it was cheap or easy to implement on mobile phones for apps. <br>I believed proper VPN required serious hardware at each end of the secure pipeline.</div><div><br></div><div>And can the <b>app</b> alone manage complete end-to-end encryption, or is that beyond the app's purview?</div><div><br></div><div>And are SD kids expected to know about this?</div><div><br></div><div>I'm learning a lot.</div><div><br></div><div>Regards,</div><div>Mark</div><div><br></div><div><br></div><div class="gmail_extra"><br><div class="gmail_quote">On 16 November 2016 at 14:52, Fitzsimmons B. <span dir="ltr"><<a href="mailto:Fitzsimmons.Brett@westbourne.vic.edu.au" target="_blank">Fitzsimmons.Brett@westbourne.<wbr>vic.edu.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-AU" link="blue" vlink="purple">
<div class="m_-187881295885122895m_3668143883783200292WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I’m guessing the answer is mobile VPN and ‘end-to-end’ encryption.
<u></u><u></u></span></p>
<p class="MsoNormal"><a name="m_-187881295885122895_m_3668143883783200292__MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></a></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <a href="mailto:sofdev-bounces@edulists.com.au" target="_blank">sofdev-bounces@edulists.com.au</a> [mailto:<a href="mailto:sofdev-bounces@edulists.com.au" target="_blank">sofdev-bounces@edulist<wbr>s.com.au</a>]
<b>On Behalf Of </b>Mark<br>
<b>Sent:</b> Wednesday, 16 November 2016 2:37 PM<br>
<b>To:</b> Year 12 Software Development Teachers' Mailing List <<a href="mailto:sofdev@edulists.com.au" target="_blank">sofdev@edulists.com.au</a>><br>
<b>Subject:</b> [Year 12 SofDev] SD exam - C8 security protocols<u></u><u></u></span></p><div><div class="m_-187881295885122895h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Hi, greyhats and greybeards. I need help.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">C8 is asking about protocols for the mobile devices with the app to
<b>send this information as securely as possible</b>. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I'm no mobile phone technology whizkid, so I hope someone can clarify things for me.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The case study makes no reference to <b>how</b> the phones send data from the app to the SBH system.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The phone would be using 3G or 4G technology - does the app designer have any control over 3G/4G communication security?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Is C8 assuming the app's data will go over 3G/4G using HTTP with SSL or TLS encryption? (This is what I assume the Q is fishing for.)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Or could the data go from the phone over 3G/4G using a different protocol entirely, such as text messaging (does
<b>that</b> use HTTP?) or something I've never even heard of (which is very, very likely).<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">What security protocols do phone companies use to get data from mobile towers to their destinations?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Surely not <b>all</b> data sent by <b>all apps </b>over mobile phone connections uses HTTP/HTTPs. Or is it?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">When you get an Angry Birds high score on your phone, is that data sent to Rovio over HTTP? Is it sent to your phone company using
<b>one</b> protocol, then to Rovio with a <b>different</b> protocol? <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Apart from SSL/TLS (or pre-encryption of entire data files using an RSA variant), what protocol can a phone app use to send information as securely as possible?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I have no idea.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks in advance if you have a clue. I'd be keen to learn about this newfangled technobother.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I just hope the kids in the exam were not expected to be mobile telecommunications engineering experts.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I shall do research in the interim. My ignorance of this field is becoming increasing obvious to us all.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Mark<br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Mark Kelly</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="mailto:mark@vceit.com" target="_blank"><span style="font-size:9.5pt">mark@vceit.com</span></a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="http://vceit.com" target="_blank">http://vceit.com</a><u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div>
</div>
<br>______________________________<wbr>_________________<br>
<a href="http://www.edulists.com.au" rel="noreferrer" target="_blank">http://www.edulists.com.au</a> - FAQ, Subscribe, Unsubscribe<br>
IT Software Development Mailing List kindly supported by<br>
<a href="http://www.vcaa.vic.edu.au" rel="noreferrer" target="_blank">http://www.vcaa.vic.edu.au</a> - Victorian Curriculum and Assessment Authority and<br>
<a href="http://www.vcaa.vic.edu.au/vce/studies/infotech/softwaredevel3-4.html" rel="noreferrer" target="_blank">http://www.vcaa.vic.edu.au/vce<wbr>/studies/infotech/softwaredeve<wbr>l3-4.html</a><br>
<a href="http://www.vitta.org.au" rel="noreferrer" target="_blank">http://www.vitta.org.au</a> - VITTA Victorian Information Technology Teachers Association Inc<br>
<a href="http://www.swinburne.edu.au/ict/schools" rel="noreferrer" target="_blank">http://www.swinburne.edu.au/ic<wbr>t/schools</a> - Swinburne University<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_-187881295885122895gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><i><br></i></div><div><span style="font-size:12.8px">Mark Kelly</span><br></div><div><br></div><div><a href="mailto:mark@vceit.com" style="font-size:12.8px" target="_blank">mark@vceit.com</a><br></div><div><a href="http://vceit.com" target="_blank">http://vceit.com</a></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div>