How apps can check integrity better than macOS eclecticlight.co/2019/07/18/how
Conversation
Replying to
Always verifying own bundle signature is a bad idea: it can be very slow (big bundle, online CRL) or crash (there are/were thread-safety issues with Security APIs). Plus there are/were bizzare cases when bundle is modified (ex. Time machine restore)
Replying to
For apps far smaller than Xcode, experience shows it’s v quick and v reliable. Are you happy to let users run your apps with broken signatures?
Comments welcome on the blog, please.
This Tweet was deleted by the Tweet author. Learn more
Show replies