This question already has answers here:
Does my application "contain encryption"?
(14 answers)
Closed 9 years ago.
I'm developing an iPhone app which edits PDF files.
If I allow users to decrypt the PDF file using a password, do I need to check the "This app contains or incorporates cryptography" checkbox when submitting the app to the app store? The app does not output any encrypted files, simply accepts a password from the user if the file is already encrypted.
Also, one of the ways a user can get a pdf into the app is by supplying a URL, since this URL may be over a https connection, does this makes the app "incorporate cryptography" even if I am just downloading a user requested file into the app and no more.
And if so, is there a way I can disable https connections and sidestep the issue for now? (I am using NSURLRequest to download the file)
The question is answered in the following well voted thread. In short, yes if you are using any cypher to decrypt or if you are using https. It is to comply with the US Export regulations.
Related
Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
Maybe you all know that .app bundle is easily accessible for reading via such tools like iExplorer (surpirise for those who thought only iTunes File Sharing allows to access data on iPhone). Maybe you've also read iOS Programming Guide, section entitled 'Installing App-Specific Data Files as First Launch'. Related paragraph estates:
"... Because iOs apps are code signed, modifying files inside your bundle invalidates your app's signature and prevents your app from launching in the future. ..."
That's obivously false, at least to some point.
I've tried to modify several files within SEVERAL free third-party apps purchased from AppStore and sucessfully modified content of several files. Voala, app launched without any problem. The thing is, that I've used iExplorer mentioned above, no hacking, cracking, jail-breaking. Just a development-enabled device, and published, reviewed apps.
What should I do?
The code signing is only verified when the app is installed on the device through iTunes, Xcode, the iPhone Configuration Utility, etc. So the wording of the programming guide is a little misleading.
This probably comes down to performance - there are some very large apps out there and having to verify the checksum of all the application's resources every time it is launched would take too long.
And the point of code signing is not really to prevent tampering, but to detect tampering. Or more correctly, it's simply a way to state that you built this specific binary with these specific resources. The attacker could completely remove the code signing if they wanted.
So there will always be ways to modify an application's resources or even code through debugging, etc. You can't really protect against this.
This question already has answers here:
Closed 11 years ago.
Possible Duplicate:
Sharing sqlite database between to iphone applications
Is it possible to share sqlite database for more than one iPhone applications? If yes then please let me know how.
No, this is not possible. You can't share file between apps, other than copying them to the apps sandbox.
I think this is not possible. All apps keep sqlite database file in their private application folder, so shared access may not be possible.
This question already has answers here:
Closed 10 years ago.
Possible Duplicate:
Using SSL in an iPhone App - Export Compliance
I am going to upload an iPhone app to the app store which uses REST webservice. I am using ASIHTTPRequest for making connection to the server and get datas. The following are the things to note
URL starts with "https"
[request setValidatesSecureCertificate:NO] (When set to yes, I am only getting SSL error messages.)
Should I say my app supports encryption while submitting to the app store?
I'm not sure from the description whether you are setting up an SSL tunnel successfully or just transferring a certificate for site authentication.
In either case, you should probably call the Department of Commerce / Bureau of Industry and Security help desk at 202-482-0707 and get some guidance about what, if any, export restrictions would apply.
There is also a web site at http://www.bis.doc.gov/encryption
You only need to explicitly say your app "supports encryption" is your app uses some other form of encryption that what Apple provides in public API:s.
Using NSURLRequest with a https address is a public API, and no extra work needed on your part.
If you compile and bundle OpenSSL into your app yourself… well that is a completely different story and you are into allot of extra work.
This question already has answers here:
Closed 11 years ago.
Possible Duplicate:
Using SSL in an iPhone App - Export Compliance
I am in Germany, and I am using OpenSSL for encryption on my iPhone App.
How is the best way to get the app in the app store? Should I get a TSU-Notification, SNAP-R, or something else?
Please see this question:
Using SSL in an iPhone App - Export Compliance
JosephH's answer to that question is probably quite relevant: it appears that these days Apple is accepting ERNs and you don't need CCATS. (However, Apple's current iTunes connect document still references the need for CCATS.)
This question is also related:
Does my application "contain encryption"?
The best way is to start by reading the Bureau of Industry and Security web site at http://www.bis.doc.gov/encryption and then call the help desk at 202-482-0707 if you have questions about your specific application.
TSU only applies if your app is "publicly available" and the fact that you're using OpenSSL does not mean your app is authorized for export as well.
This question already has answers here:
Closed 12 years ago.
Possible Duplicate:
Launch an app from within another (iPhone)
i want to launch another Application in iphone sdk...for example the user has downloaded two application from appstore.when he touch the button which is in one APplication, Another Application must be opened, current one must be closed..is it Possible?
If the target application has a registered custom url scheme, you can use that to open the other app.
http://iosdevelopertips.com/cocoa/launching-your-own-application-via-a-custom-url-scheme.html
I'm pretty sure the only way you can do this is if the second application registers itself as a handler for some DocumentType, and then the first application handles such a document. The user will be prompted to open the document with the second application. You can read more details here.
You can't just launch applications on behalf of the user, though.
You can register a custom URL Scheme in your Application B, and then open it from your Application A using this custom URL Scheme.
More info here