2

The Keychain is shared among many different apple products and includes asymmetric, symmetric, and other types of security data.

People who use iCloud, and also enable the keychain synchronization allows for many (all?) secrets to be copied from their OSX computer to iOS.

I haven't yet been able to figure out how an iOS app can get access to all passwords on a device, but I do see that Safari mobile has the ability to share passwords with the Safari desktop.

Question

The reason I'm asking is because I'm saving credentials to the keychain that should only be read by my signed application, and should not be read by any extension, plugin, etc that isn't produced by me.

In other words, I am concerned that private key data can be exposed by the auto population feature of Safari's username and password courtesy feature.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.