-
Notifications
You must be signed in to change notification settings - Fork 39
Description
I'm just tossing out this idea as I think it might be a good for ios-factor.com.
It should be possible for the server to make the app stop working (or prompt the user with a warning) if there is some serious vulnerability issue with the installed version.
Every API call to the primary backend-server should send the following values
app_version (1.0.0)
app_build_number (f477d3b)
device_model (iPhone1,1)
os_version (10.11)
app_identifier (com.ios-factor.app)
system_language (nb_NO)
Use names of your liking. We pass these values in request headers, but do as you like. The server should then be able to respond with http code 403 or the server may tag a long a warning using for example response headers. The error returned from server should state that the app needs to be upgraded because of a security vulnerability and in what way users are affected. We use the terms suggest upgrade and force upgrade.