iOS apps could really benefit from the newly proposed Security.plist standard

guest · Nov 29, 2019

iOS apps could really benefit from the newly proposed Security.plist standard
Security.plist was inspired by the already-existing and highly popular security.txt standard
November 29, 2019
https://www.zdnet.com/article/ios-a...m-the-newly-proposed-security-plist-standard/

Earlier this month, security researcher Ivan Rodriguez proposed a new security standard for iOS apps, which he named Security.plist.
The idea is simple. App makers would create a property list file (plist) named security.plist that they would embed inside the root of their iOS apps.

The file would contain all the basic contact details for reporting a security flaw to the app's creator. Security researchers analyzing an app would have an easy way to get in contact with the app's creators.
INSPIRED BY SECURITY.TXT AND ITS GREAT SUCCESS
Rodriguez said the idea for Security.plist came from Security.txt, a similar standard for websites, that was proposed in late 2017.

Rodriguez, who is an amateur bug hunter in iOS apps, said he decided to propose a similar thing for iOS apps because getting in touch with an app's dev or security team has been a problem in the past.
Click to expand...

The security researcher has not yet reached out to Apple, the only entity that could make security.txt mandatory for all iOS apps.
A WEBSITE TO HELP IOS APP MAKERS GET STARTED
To help move things along, Rodriguez published a website for security.plist where app makers can generate a basic file to include inside their apps.
Click to expand...

Log in or Sign up

iOS apps could really benefit from the newly proposed Security.plist standard

guest Guest

Log in or Sign up

iOS apps could really benefit from the newly proposed Security.plist standard

guest Guest

Useful Searches