Confirmed users
717
edits
Apps/Security: Difference between revisions
Jump to navigation
Jump to search
→Format for privileged and certified apps
| Line 327: | Line 327: | ||
We need an application delivery mechanism that provides assurances on app integrity and authenticity, and also allows for well-defined application & privilege scope enforcement so integrity can be maintained at runtime. | We need an application delivery mechanism that provides assurances on app integrity and authenticity, and also allows for well-defined application & privilege scope enforcement so integrity can be maintained at runtime. | ||
Thus all privileged and certified apps will be in packaged format. This package will be provided to the app store for the review, which will then sign it upon approval. Upon installation, the client will verify that the signature is valid and chains to a privileged app store. | |||
Privileged and certified apps will be accessed via a unique scheme (app://). The domain will correspond to the app id. | Privileged and certified apps will be accessed via a unique scheme (app://). The domain will correspond to the app id. | ||