Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

As of iOS 9 (I think) the native Facebook login opens a safari view inside the app. Signing in once will remember you for any other apps. They got rid of the app switch.


> Facebook login opens a safari view inside the app

I'm always troubled by this stupid design. How do I know that the web view inside the app is not fake?


You have to hope that the app ist trustworthy, the developer uses TLS, and implemented the certificate verification correctly.


Safari view controllers are completely separate - it is not possible to implement any kind of checking with it.

However Safari itself does do a reasonably good job of checking the certificate, and the view controller does show the hostname at the top.

Doesn't stop you from just faking the UI though




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: