Looking to incorporate model-viewer or three.js into my personal website to showcase 3D models. To display these models online, the client must retrieve files from the server (including the 3D mesh and texture images).
However, I want to prevent my visitors from accessing these files directly. Seeking advice on how to achieve this goal, here are some initial thoughts that may not be effective:
(1) Implementing a tool like crypto-js for file encryption and decryption
- Concerns about users having access to decrypted files on the frontend
- The key transfer to frontend code raises security vulnerabilities
(2) Dividing files into small segments and reassembling them on the client side
- Similar issue as with the first approach
- Risks of exposing codes for reassembly, enabling file access
While exploring these ideas, uncertainty arises about achieving the desired outcome 🤔
If impossible, are there alternative strategies to make it difficult for users to obtain file access?