You're designing the transfer feature of an iOS banking app. Which layers of defense would you put on the client and the server to protect a single transfer request?
TLS with certificate pinning on the wire, the token in the Keychain behind a device-lock access control and biometrics, and a client-generated idempotency key on the request to stop duplicate retries, while every one of these stays secondary: account ownership, balance, limits, and approval are the server's final call.
PersistenceMultiple choiceIntro
Compared with UserDefaults, select all the correct characteristics of the Keychain.
#security #keychain
PersistenceShort answerBasics
Two payment apps from the same team, the main app and a merchant app, have to share one…
#security #keychain
SecurityShort answerIntro
Why does an iOS app have to be code signed before it runs? Focus on what the signature…
#security
SecurityMultiple choiceIntro
You want a Keychain item that never moves to another device through a backup restore and…
#keychain