Re: Share and store RSA - public key in java server and vice versa
Re: Share and store RSA - public key in java server and vice versa
- Subject: Re: Share and store RSA - public key in java server and vice versa
- From: Roland King <email@hidden>
- Date: Thu, 15 May 2014 11:43:26 +0800
On 15 May, 2014, at 7:25 am, Jens Alfke <email@hidden> wrote:
>
> On May 14, 2014, at 3:48 PM, Roland King <email@hidden> wrote:
>
>> I'm just pointing out the advice which is constantly and consistently given by Apple (particularly Quinn) on the developer forum that getting the bits of a private key on iOS is unsupported and subject to change, and to do the job on a server which you trust and return the information. Here's one such thread, there are dozens of them.
>>
>> https://devforums.apple.com/message/951417#951417
>
> Thanks for the link. I added a rant explaining exactly why this is a terrible idea. Who knows whether it’ll do any good; I’ve completely given up on Apple ever getting its crypto act together.
>
> —Jens
That's quite the reply - I've hit the "Email Updates" on the thread and I'm sitting with a new bag of popcorn waiting to see what happens next.
Since that method of extracting private keys was recently broken on OSX I fear that iOS is not far behind.
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden