3 ms·
Is there no option in the store for developers to "sign" the apps in some way and for phones to detect when the app doesn't use the developer's signature? If s
by higherpurpose 12y ago
Is there no option in the store for developers to "sign" the apps in some way and for phones to detect when the app doesn't use the developer's signature?
If such a feature doesn't exist in the app stores, it should.
- TheLoneWolfling 12y agoThere is no way to do this in a secure manner that doesn't lead to a closed garden, that I know of at least.
- higherpurpose 12y agoAnd that would be different from the current iOS store, how?
- uxp 12y agoI think TheLoneWolfling was talking about Verizon or AT&T enabling this kind of "only trust this cert" with one of their own as an intermediary, effectively shutting out Apple and all the actual independent developers on that ecosystem in favor of "The AT&T App Store for your iPhone by AT&T" style closed gardens. Ultimately, Apple holds the private key that signs every developer's certificate, and thus they have the capability of granting a certificate that is in every way compatible as another developer's certificate. There is no way to escape this scenario, that plagues SSL and TLS as well, without redesigning the asymmetrical certificate infrastructure from the ground up.