loginless client/server architecture (iOS)
===

I'm currently in the phase of planing a project involving loginless service.

Users would be identified by an unique device id created on the client (ios).

What are the security concerns? What are the common pattern to prevent attacks?

- sockets would be wrapped with ssl
- create a private certificate to verify client? (what about someone decompiling the binary and obtaining it?)

any thoughts are appreciated