# Let's talk about Gladys V4 **URL:** \ **Category:** Développement\ **Created:** [October 20, 2018, 9:24pm UTC](https://community.gladysassistant.com/t/parlons-de-gladys-v4/3578 "2018-10-20T21:24:26Z")\ **Posts on this page:** 1\ **Showing post:** 764
**Author:** ![bertrandda](https://gladys-assistant-community.b-cdn.net/user_avatar/community.gladysassistant.com/bertrandda/32/5929_2.png) [@bertrandda](https://community.gladysassistant.com/u/bertrandda)\ **Post date:** [April 8, 2020, 9:50pm UTC](https://community.gladysassistant.com/t/parlons-de-gladys-v4/3578/764 "2020-04-08T21:50:35Z")
Thanks for these details, that’s exactly what I was trying to understand. > [@pierre-gilles](#): > > As we do not control the code of Owntracks client applications, this route is not end-to-end encrypted, it is encrypted in transit of course via HTTPS, but only between the mobile and the gateway, then encrypted between the Gateway and the Gladys instance. It’s a shame, but we don’t control the Owntracks code. That’s exactly what I was going to say, everything that comes to this Open API is not encrypted. > [@pierre-gilles](#): > > We need to find a way to make end-to-end encryption work via Tasker! I saw that Tasker allows you to execute JS code, so we could very well invoke the same encryption code as in the Gladys Plus JS client, it’s not very complicated! That’s for sure, as soon as it’s possible, we need to encrypt, but it won’t be possible in all cases. You are probably right about Tasker, it’s worth studying, but I only took it as an example. There will be other applications/services where it won’t be possible, Totof mentioned PhoneTrack here: [Utiliser Owntracks avec Gladys 4! - #24 par Totof](https://community.gladysassistant.com/t/utiliser-owntracks-avec-gladys-4/5006/24), the data is transmitted in an HTTP request, we won’t be able to encrypt from the application. In your presentation of the Gateway, you talked about connecting with external services (Google Assistant, Alexa, IFTTT…) I don’t exactly know how they work but if they need a webhook to Gladys it will be the Gateway and once again we won’t be able to do anything about it. I totally understand the goal of end-to-end encryption, personally I am completely for it, and Gladys has among other things essential points the security and respect for privacy. Unfortunately in some cases we may need to trust (like for OwnTrack), provided that we properly warn the user in the documentation. We do our best for encryption and we are transparent for the rest. As for the list of routes in the Open API, I don’t know if it’s worth putting all the routes of Gladys. I don’t have many scenarios in mind yet, but limiting the Open API to a few routes that really need it would push us to really limit this data exposure to the Gateway and force us to always look for the most secure solution. As you say, the reflection remains completely open, I will continue to study this over the next few days. --- _[View the full topic](https://community.gladysassistant.com/t/parlons-de-gladys-v4/3578)._