I am developing an VPN app, currently on mobile app part(Flutter). I have done server backend side. Client side code is done too. VPN establishment is based on socket communication:
Client sends it its own public key and my Server sends back leased ip address.
But if someone with malicious intentions were to reverse engineer my app he would gain access to what instructions my app sends to server to establish vpn connection. This is really bad security vulnerability. They can send those same instructions from anywhere of the planet and create psudeo clients on server side to sabotage my server.
What solution should i implement?
kleigen_marschalan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.