Security
App Attest
Bots call your API directly and clear out the coupons. How do you use App Attest so the server accepts only requests from your real App Store app?
Up next
SecurityMultiple choiceAdvanced
Which statements about a key created with CryptoKit's SecureEnclave.P256.Signing.PrivateK…
#secure-enclave
SecurityShort answerAdvanced
Your app puts the token the server returned at login into the header of every request. An…
#app-attest
SecurityShort answerAdvanced
A security audit says card numbers, passwords, and PINs stay in process memory after they…
#secure-enclave