News for hackers. Stuff that matters.

A comment on Show HN: Stretch – Free limousine rides. Parent comment

Re:Show HN: Stretch – Free limousine rides by riobard on Monday May 29, 2017 @01:35AM (#14437579)
> Facebook login opens a safari view inside the app

I'm always troubled by this stupid design. How do I know that the web view inside the app is not fake?

[ Parent | on HN ]
Re:Show HN: Stretch – Free limousine rides by foepys on Monday May 29, 2017 @03:50AM (#14437950)
You have to hope that the app ist trustworthy, the developer uses TLS, and implemented the certificate verification correctly.
[ Parent | on HN ]
Re:Show HN: Stretch – Free limousine rides by BillinghamJ on Monday May 29, 2017 @04:46AM (#14438131)
Safari view controllers are completely separate - it is not possible to implement any kind of checking with it.

However Safari itself does do a reasonably good job of checking the certificate, and the view controller does show the hostname at the top.

Doesn't stop you from just faking the UI though

[ Parent | on HN ]