mogol / flutter_secure_storage

A Flutter plugin to store data in secure storage
https://pub.dartlang.org/packages/flutter_secure_storage
BSD 3-Clause "New" or "Revised" License
1.09k stars 340 forks source link

InfoSec Documentation for Windows is missing #738

Open Adam-Langley opened 2 weeks ago

Adam-Langley commented 2 weeks ago

While the techniques for persisting data on iOS and Android is covered in the .md file - the same for Windows is strangely missing.

Customers are going to want to know how their sensitive information is being handled by applications which consume this library.

I shouldnt have to read and understand the native C code to find out where the data is stored, how it's encrypted, symmetric/asymmetric, how keys are managed etc.

Android and iOS implementations benefit from just being able to direct the developer/application customer to Google's KeyStore or Apple's Secure Enclave documentation - but it appears it's roll-your-own on Windows, so is in need of clear documentation.