IPCSocket Security

General
1

Hi!

I am developing an app which uses IPCSockets to have communication between a process which is running as a service and a procecess which runs with normal user privileges. I am doing this for macOS and for Windows, but might add Linux to the mix as well.

I am wondering how secure that communication is: So for example if other processes could eavesdrop. Or if other processes could hijack a connection.

Would by grateful for your opinion :slight_smile:

Best
Florion

2

To my (limited) knowledge such sockets can be vulnerable to man-in-the-middle attacks so you may want to encrypt everything which is written to the IPC socket, at least if you develop both the main process and the helper process.