Hacker News new | ask | show | jobs
by jbrooksuk 4602 days ago
I take it that the secret key is visible in the requests within Charles?
1 comments

Yes in a way, but actually no, it is hashed with some other values.
It's both hashed and the first few chars (four, IIRC) of the hash are transmitted, so it's really unlikely that one will be able to brute-force it.