Post

Replies

Boosts

Views

Activity

Reply to Unknown CryptoTokenKit error encountered during SecKeyCreateSignature() with Secure Enclave private key
Many thanks @eskimo for the very insightful and honest answer. In the latest 30 days the issue affected ~0.05% of our users, it's a fraction of the whole population, but still a significant number. We will try to add some workaround to help users to re-generate and re-enroll the key if we see this issue happening, currently it's treated as a transient error so users can retry, but as you mentioned, it will never work again. Do you have enough data i.e. sysdiagnose reports to debug it? I can help to get more reports. We get info about this issue almost in real time and have infrastructure/processes in place to follow up with users and collect diagnostics (including sysdiagnose) if needed.
Topic: Privacy & Security SubTopic: General Tags:
Sep ’22
Reply to Unknown CryptoTokenKit error encountered during SecKeyCreateSignature() with Secure Enclave private key
Thanks @eskimo, we used to use .biometryCurrentSet (for internal users in the beta phase long before making the app available in AppStore), but stopped when "Face ID with a Mask" was introduced as it was invalidating the enrollments. Current set of flags: let access = SecAccessControlCreateWithFlags( kCFAllocatorDefault,     kSecAttrAccessibleWhenUnlockedThisDeviceOnly,     [.privateKeyUsage, .biometryAny],     nil )
Topic: Privacy & Security SubTopic: General Tags:
Sep ’22
Reply to ios 14 beta webauth user activated events
It means the user needs to interact with the website via gesture, e.g. touch. It's nicely explained on https://webkit.org/blog/11312/meet-face-id-and-touch-id-for-the-web/. Something like this should work: function login() { // use navigator.credentials.get  } document.addEventListener("DOMContentLoaded", e => { document.querySelector('#login-button').addEventListener('click', login); }
Topic: Privacy & Security SubTopic: General Tags:
Aug ’21
Reply to Unable to complete associated domain check
Hi @mervyn.ong, If I am not mistaken, for security reasons, the file is not accessed or validated by the device, but Apple backend infrastructure (CDN) as such the file must be accessible via the internet. There is a way to temporarily tweak this behaviour by using query parameter ?mode= during development, it's nicely explained in the documentation https://developer.apple.com/documentation/xcode/supporting-associated-domains.
Topic: Privacy & Security SubTopic: General Tags:
Jun ’21