search

nowsecure / secure-mobile-development

A Collection of Secure Mobile Development Best Practices
https://books.nowsecure.com/secure-mobile-development/en/
Other
557 stars 123 forks source link

Touch ID policies via ACL #31

Closed hexploitable closed 7 years ago

hexploitable commented 8 years ago

There is room for some additions to the Touch ID section for iOS. There are ACL policies which can be used for example to delete the keychain entries if the fingerprint enrolment data on device changes. This can be ideal for example to delete data if another finger has been enrolled since the data was stored. Applications may wish to ask the user to re-authenticate via alternative means, before creating the keychain entry back up again.

If i find time i might submit a pull

sbakken commented 7 years ago

Thanks for the suggestion. We've addressed your comment with PR https://github.com/nowsecure/secure-mobile-development/pull/64