CODEWITHSUNDEEP
iosibm-mobilefirstauthenticity
AnthonyWhelanIBM
AnthonyWhelanIBM

Reputation: 21

IBM MobileFirst: Application Authenticity rejection despite the application's authentic identity?

IBM MobileFirst: Why does Application Authenticity reject an application despite the application's authentic identity, in IBM MobileFirst Platform Foundation 7.0 and 7.1, after the application is installed from the Apple App Store?

Upvotes: 0

Views: 40

Answers (1)

AnthonyWhelanIBM
AnthonyWhelanIBM

Reputation: 21

This blog post details a possible scenario which can trigger a failure where Application Authenticity will reject an application despite the application's authentic identity, in IBM MobileFirst Platform Foundation 7.0 and 7.1, after the application was installed from the Apple App Store.

Workaround

For MobileFirst Platform Foundation 7.0 and 7.1, use Basic Application Authenticity (with bitcode switched off). The Basic Application Authenticity algorithm uses application metadata to generate challenges for the client. These challenges are generated in a random process which is very hard to reverse engineer/reproduce.

Upvotes: 1

Related Questions