Skip to content

Ensure MASWEs enforce device authentication information when performing security-related actions. #187

Description

@jacobocasado

MASWE-0049 covers the following:
The app does not use the APIs of the system that use the underlying device authentication information to perform security-related actions, e.g, on iOS, not generating a key in the Keychain with passcode-dependent protection classes such as kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly.

The issue is created to ensure this second bullet is also covered in 0003/0007 and/or others that can also mention it.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions