Security
5 posts
Most of the services your application interacts with require authentication. Authentication through a secret, an API key or a client secret, is a commonly used method. Your application includes the secret in the request it sends to the service. That is only possible if your application has access to the secret at runtime.
in Security
Privacy and security have always been top priorities for Apple. Sandboxing is a result of that commitment. On iOS, applications have been sandboxed from day one. This isn't true for macOS applications. Sandboxing was added to macOS with the announcement of the Mac App Store in 2010.
in Security
Yesterday, I wrote about App Transport Security and I showed you how to configure a project for App Transport Security. Despite Apple's bold move to enable App Transport Security by default for any build created with Xcode 7 and higher, many developers are confused, disabling it altogether.
in Security
Apple has always been dedicated to protecting the privacy of its customers. To this end, Apple added App Transport Security to further improve the privacy and security of applications that connect to the web. App Transport Security is enabled by default for every application that is built against the iOS 9 SDK or the macOS 10.11 SDK. Even though it is currently possible to opt out of App Transport Security, Apple plans to require App Transport Security for every build submitted to the App Store starting 1 January 2017.
in Security
Many developers struggle with the concepts authentication and authorization. They are often used interchangeably. What is the difference between these concepts? While the difference is subtle, it is vitally important. Let's take a look at authentication first.
in Security