4 ms·
Is it possible the OS should be designed so only the OS can read the actual private key so then at least at some level some apps don't ever need to see the key,
by greggman2 7y ago
Is it possible the OS should be designed so only the OS can read the actual private key so then at least at some level some apps don't ever need to see the key, they just need permission to authenticate.
- geofft 7y agoAs described in a sibling thread, while that contains the damage, that doesn't actually solve the problem - you're still giving malicious code permission to authenticate.