I'm beginning with Android App development and I want to make sure that I'm taking the proper security precautions since most apps will handle sensitive data.
What security precautions should be taken in order for my app and the data it handles to be secure? (precisely, my worst case scenario thread model would be a well funded attacker trying to get to the data handled by the app in whatever way it can)
I know that,
- The signing key must remain secure
- Data should be stored within the apps sandbox (preferably encrypted)
- Data should be encrypted end-to-end
But should I, for example use windows as a development platform or is linux more advisable in this case.
The sort of apps I'm planning to make will be primarily data transfer and communication apps.
Any thoughts are appreciated!