GSoC project discussions

[Ingo Klöcker]

On Samstag, 9. Mai 2020 17:23:22 CEST Thomas Baumgart wrote:
> On Samstag, 9. Mai 2020 16:25:40 CEST Prasun Kumar wrote:
> > Regarding the feedback from the AqBanking project...
> > 
> > > That's why I was contemplating providing some service like libofxhome
> > > where you can query a bank data provider. Then you would only need to
> > > update the data in one place (on the server).
> > 
> > Can someone point me to 'libofxhome' service which is mentioned as I don't
> > understand the type of service discussed here? Is it a web-based service?
> 
> Yes, it is web-based. You can find it at https://www.ofxhome.com. The API is
> documented at https://www.ofxhome.com/api.txt. This API is integrated in
> KMyMoney already.

I have some privacy concerns with such a web-based service. If we ask such a 
service for information for a specific bank, then the provider of this service 
could keep track who (IP address) is using which bank. Unless the full dataset 
is prohibitively large, I'd prefer a download of the full dataset (when it has 
been updated).

Another problem with such a web-based service is that it requires an internet 
connection (unless you have caching and request already cached entries, but 
caching makes things even more complicated).

Moreover, live communication with a web-based service is much more complicated 
than reading and occasionally downloading a file.

A web-based service adds an attack vector (e.g. if the service is hacked). (Of 
course, downloading an updated full dataset also adds an attack vector.)

If the web-based service is down, then the locally running application 
probably stops working. (If the download for the full dataset update is down, 
then the worst that happens is that updating is not possible.)

I suggest to keep using a local copy of the data (in whatever storage format 
works best) and just add the possibility for retrieving an update.

Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde-finance-apps/attachments/20200509/e38a86e9/attachment.sig>