Re:Ask HN: How do I ensure that a real iOS client is using a...
by saurik on Tuesday February 14, 2012 @08:22PM
(#3592576)
This is not possible. You should design your architecture so that this either does not matter or has a bounded cost.
[ Parent
| on HN ]
Re:Ask HN: How do I ensure that a real iOS client is using a...
by evilswan on Tuesday February 14, 2012 @08:54PM
(#3592656)
Had a hunch this was the case, just needed someone smarter than I to confirm.
How do banks ensure nobody makes a phishing version of their apps?
Re:Ask HN: How do I ensure that a real iOS client is using a...
by saurik on Wednesday February 15, 2012 @01:14PM
(#3595360)
They can't. If "no phishing" is a desired property, then it would be up to the distribution ecosystem to either carefully monitor for such products and deny them, or to at least allow some mechanisms for users to verify products themselves (such as SSL combined with URL bars do for general web traffic).