Re: Cross-app security/privacy
Re: Cross-app security/privacy
- Subject: Re: Cross-app security/privacy
- From: John Smith <email@hidden>
- Date: Fri, 26 Apr 2013 17:14:21 -0700
A couple thoughts on why it could be considered non-ideal:
- It's overhead. Application-level encryption is only necessary because of the fact that pairing in iOS is per-device rather than per-app. Other single-purpose Central devices designed to communicate with the same Peripheral are forced to implement the same application-level encryption where transport-level encryption would otherwise be sufficient.
- There are standard profiles defined which include authorization mechanisms, but don't include application-level encryption (some of which deal with data I would consider sensitive -- e.g. medical data). As a result, the peripheral is basically forced to decide if they want to be compliant with a standard profile, or if they want to protect sensitive data from being accessed by third party apps (i.e. apps which did not perform the pairing as intended by the user) on iOS devices.
--John
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Bluetooth-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden