[Feature] Obfuscate or Encrypt the FeatureCache.txt on GrowthBook-KMM

[argaasasta]

Is it possible to encrypt the FeatureCache.txt on GrowthBook-KMM

Because this file can contain the User Phone number or User id that sensitive

[vazarkevych]

Hi @argaasasta. Please let us check that.

[argaasasta]

@vazarkevych i try to create the fix on here #165

[Bohdan-Kim]

Are you able to consider PRO?

[argaasasta]

@Bohdan-Kim is the PRO will encrypt this cache, so it not visible to pentester?

[Bohdan-Kim]

@argaasasta Yes, the endpoint response will be encrypted. You'll need to pass encryption key into SDKBuilder in order to setup encryption

[argaasasta]

@Bohdan-Kim we use this Growthbook for FE and BE, will BE need the Encryption Key too? just for read the value from GrowthBook?
I think this encrypt on local cache should be on the not PRO too, since it only affect android

[Bohdan-Kim]

@argaasasta what FE, BE means?
Whether encrypt on local cache should be on the pro or not, should be discussed with maintainers

[Bohdan-Kim]

If the user of the SDK doesn't want to have a cache in file, user disables caching

[Bohdan-Kim]

This issue was fixed in v4.0.0-alpha.
Are you able to try it?

[vazarkevych]

Hi @argaasasta . Could you please check v4.0.0-alpha?