tested iOS application probably uses special Token directive for authentication to server. This token was found in file Cache.db-wal. I can't understand, why it's just in this one file and not in Cache.db as well. Moreover, I'm not sure whether it's ok to keep this token (useable till timeout or next logon) in this file instead of e.g. keychain. Can anybody give some points whether this solution is secure enough?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.