Honda E Forum

Ah, and if you run the docker you get this, which is encouraging

..and as expected the private deployment only allows Tesla's or BMW's to be added.

bogga wrote: ↑Thu Apr 08, 2021 6:58 pm So as soon as they open source the Honda integration, and update the docker image, I can run it on my home server.. I guess I just lose the fancy iPhone app?

Honda will never release an API, so what you see now is what you'll ever get.
As for no fancy iPhone app, don't worry, the website states that there's a PWA until the Android app is released.

londiniumperson wrote: ↑Thu Apr 08, 2021 7:12 pm Honda will never release an API, so what you see now is what you'll ever get.

How are they doing it at the moment then?

bogga wrote: ↑Thu Apr 08, 2021 8:24 pm

londiniumperson wrote: ↑Thu Apr 08, 2021 7:12 pm Honda will never release an API, so what you see now is what you'll ever get.

How are they doing it at the moment then?

Screen scraping

londiniumperson wrote: ↑Thu Apr 08, 2021 9:00 pm

bogga wrote: ↑Thu Apr 08, 2021 8:24 pm

londiniumperson wrote: ↑Thu Apr 08, 2021 7:12 pm Honda will never release an API, so what you see now is what you'll ever get.

How are they doing it at the moment then?

Screen scraping

I asked Tronity when the Honda E would be available in the private deployment and the answer was:

RAL7004 wrote: ↑Thu Apr 08, 2021 9:32 am ... or via web browser.
The only thing that bothers me is the fact that you have to enter your password for the Honda+ app. It makes sense to me - but you hand over access to the data to this company...

That is bad security practice. Never hand over your password. In an almost ideal world, Honda would expose an authentication service for third party apps. You log in to Honda and the apps exchange keys. These keys can be revoked at any time by you, the user, and can have permissions attached to them.

If this is not the case here, then do NOT use it.

renedekat wrote: ↑Sun Apr 11, 2021 8:14 am

RAL7004 wrote: ↑Thu Apr 08, 2021 9:32 am ... or via web browser.
The only thing that bothers me is the fact that you have to enter your password for the Honda+ app. It makes sense to me - but you hand over access to the data to this company...

That is bad security practice. Never hand over your password. In an almost ideal world, Honda would expose an authentication service for third party apps. You log in to Honda and the apps exchange keys. These keys can be revoked at any time by you, the user, and can have permissions attached to them.

If this is not the case here, then do NOT use it.

+1 on this matter.
Especially so when the app developers won't/can't do this because this screams to a lack of technical security knowledge/ability or worse still knows that this is a serious security concern but instead prioritises other areas instead.
A company like this that doesn't employ suitable security measures at the application login method certainly won't be considering good practice elsewhere in their infrastructure and is to be avoided at all costs.

renedekat wrote: ↑Sun Apr 11, 2021 8:14 am That is bad security practice. Never hand over your password. In an almost ideal world, Honda would expose an authentication service for third party apps. You log in to Honda and the apps exchange keys. These keys can be revoked at any time by you, the user, and can have permissions attached to them.

If this is not the case here, then do NOT use it.

Absolutely - won't do that either, of course....

TRONITY App, now on Android

https://play.google.com/store/apps/deta ... om.tronity