News for hackers. Stuff that matters.
Re:iOS Static Libraries Are, Like, Really Bad by quesera on Friday January 17, 2014 @09:51AM (#7076004)
That's right, thanks.

Separate binary files have individual hashes, which are included in the package manifest file. The manifest is then signed, so a single signature covers all hashed files in the manifest.

Curiously though, in all of the MAS apps I've checked, bundled dylibs are explicitly not hashed in the manifest. This is the developers choice, but perhaps a default?

There are no comments on this comment yet.