SecurityService should encrypt RemoteEvent/RemoteFunction names via GUID
Closed this issue · 1 comments
NobleDraconian commented
Currently, remote's names are not encrypted, making them easier to target by exploiters. SecurityService
should encrypt RemoteEvent/RemoteFunction names via HttpService:GenerateGUID()
to make it harder for exploiters to determine which remote does what.
I'm not entirely sure how I'm going to pass remote names on to the client though - this will need some more planning before it can be implemented.
NobleDraconian commented
Closing, as SecurityService
no longer exists.