Resource Injection Placeholder

[Jack]

https://www.mc-market.org/wiki/resource-anti-piracy-placeholders/

UserID and Username would be too easily identifiable, as you know what your username and userID are.
Resource and Version don't really do anything. Version might be useful for some developers.
Timestamp, Filehash, and Nonce all correspond to the specific download request that were made for the resource.

If I'm understanding this correctly, a user that downloads a resource several times will be provided with different Filehash and Nonce placeholders, which may also make it fairly easy to identify for a single cracker.

I think it would be good to add a Purchase/License Nonce/hash, which corresponds to the specific license/user that purchased the resource, which would remain the same for all downloads from a single user, different for unique users, but would not as easily identifiable as UserID or Username.

 

[Mick]

I'll move this to pending for further discussion with Justis and Jayson.

Thanks for the suggestion Jack

 

[Mick]

To provide an update on this suggestion, it's something that we've definitely got planned to be introduced after we migrate to XF2. We'll be creating a license key placeholder that will be accessible through the API and through a soon-to-be-released downloads page for each of your resources. The key will be generated on a per-user and per-resource basis, so downloading the same product multiple times from the same account will all inject the same key. I expect that this will be very useful to a number of authors and look forward to implementing it over the next couple of months.

I'll leave this in pending for now, but eventually when this is fully implemented I'll move the suggestion to accepted. Thank you