问题
The documentation on Offline Capabilites of the Firebase Realtime Database explains how Firebase provides tools for persisting data locally on the client:
By enabling persistence, any data that the Firebase Realtime Database client would sync while online persists to disk and is available offline, even when the user or operating system restarts the app. This means your app works as it would online by using the local data stored in the cache.
However, there is no information about how the persisted data is stored or how it is secured.
Question: Is the database encrypted before it is persisted to the devices internal storage? Is the local database protected from being read by an attacker who extracts it from the devices storage via adb or other methods?
回答1:
firebaser here
The on-device cache is not encrypted. It is readable by anyone who has access to the device storage.
来源：https://stackoverflow.com/questions/42808289/how-secure-is-offline-data-stored-on-clients-by-firebases-realtime-database