5

What are the security risks of installing a "configuration profile" on iOS from www.vshare.com? I don't know what a configuration profile is or what it does. They are found in Settings > General > Profiles & Device Management.

Also, what are the security risks of trusting an "enterprise app", which is found in the same place in settings?

2
  • 3
    Well, one major security risk is "I don't know what a configuration profile is or what it does."
    – J Kimball
    Commented Mar 9, 2016 at 20:57
  • I'd suggest removing the link and keeping this question more broad.
    – d1str0
    Commented Mar 9, 2016 at 21:46

1 Answer 1

1

These configuration profiles can be used to install certificates on your phone. This let's the company then MITM your traffic and sniff all of your HTTPS connections. This comes down to whether you trust this company to see all your traffic and keep their private key safe so others can't pretend to be them.

As for "trusting" an app, installing any software you don't know about or inherently trust is probably a bad idea.

1
  • You would still have to visit a particular site that presents a bogus certificate, wouldn't you? Just because you have a new fraudulent root certificate doesn't mean everyone uses it. That site says it contains a 'web clip'. And doesn't iOS partition apps to prevent them from reading each other's data?
    – Chloe
    Commented Mar 12, 2016 at 17:09

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .