Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce App Attest #1913

Closed
cpholguera opened this issue Jun 15, 2021 · 2 comments · Fixed by #2462
Closed

Introduce App Attest #1913

cpholguera opened this issue Jun 15, 2021 · 2 comments · Fixed by #2462
Assignees

Comments

@cpholguera
Copy link
Collaborator

cpholguera commented Jun 15, 2021

Introduce App Attest in https://github.com/OWASP/owasp-mastg/blob/master/Document/0x06a-Platform-Overview.md

App Attest allows your app to attach a hardware-backed assertion as a part of the request. Your server can use assertion to verify the request came from your genuine app, on a genuine Apple device.

https://developer.apple.com/videos/play/wwdc2021/10244/

https://developer.apple.com/documentation/devicecheck/assessing_fraud_risk

https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_developer_devicecheck_appattest-environment

https://developer.apple.com/documentation/devicecheck/validating_apps_that_connect_to_your_server

@karolpiateknet
Copy link
Contributor

Hey, I would like to handle this one :)

@cpholguera
Copy link
Collaborator Author

Thanks @karolpiateknet, just assigned to you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants
@cpholguera @karolpiateknet @lihter and others