4

I am using the following workflow to generate and visualize vector tiles.

  1. Store edited shapefile to PostGIS
  2. Create vector tiles using Tippecanoe from PostGIS data
  3. Serve vector tiles through Tileserver-GL

Now when I am inspecting the resultant map site I found the pbf files in Network section. It contains some hexadecimal values. I am using proprietary dataset. This dataset is confidential. I want to know is this secured method? If there is any way of reverse engineering the PBF files of vector tiles what is that and how can I protect my tiles or data security?

  • 1
    You must write coordinates and attributes which are needed for defining the rendering styles into vector tiles, and all that is included is available without reverse engineering. Vector tile clients can parse that data out-of-the box because otherwise they could not visualize the data. What part of data do you consider confidential? – user30184 Dec 5 '18 at 12:07
8
+50

No, the data is absolutely not secure by virtue of being encoded as vector tiles.

Vector tiles are typically PBF data (protocol buffers) in the Mapbox Vector Tile (MVT) specification. (Media type: application/vnd.mapbox-vector-tile.) It is a well-known binary format. The reason your map client knows how to display the data encoded in your vector tile is because it knows how to decode that information. It is trivial to read a vector tile back out to human-readable GeoJSON. Just check out this long list of vector tile parsers, generators, clients, servers, and CLI tools.

If your data is private and needs to be secure, then you want to secure your application, and also your server. There are lots of authentication and authorisation models, but typically a user would need to login in to your application, be authenticated, and then use proof of this authentication when making requests for your vector tiles. But the vector tiles themselves are just data, even if not human-readable in their native format. It seems you've already asked a good related question on this matter here.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.