Apple 是否修复了应用内购买收据验证的安全问题?
我指的是 中描述的问题本次讨论。
从阅读该讨论来看,当时似乎不可能安全地允许用户在多个设备上使用 IAP 产品。
I am referring to the issues described in this discussion.
From reading that discussion, it appears at the time it was not possible to securely allow a user to use an IAP product on multiple devices.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
不,这个漏洞仍然存在(我最近刚刚完成了另一个 StoreKit 实现)。
我认为他们在不久的将来修复它是不可能的,尤其是在他们已经与公众使用了很长一段时间之后。推出与已实施的解决方案不能立即兼容的新解决方案可能会带来灾难性的后果。
尽管我认为普通消费者不具备利用您所担心的漏洞的专业知识。困难在于如何说服业务经理这一点。
No, this hole still exists (I just recently finished another StoreKit implementation myself).
I don't think it's feasible for them to fix it in the near future, especially after they've been using it with the public for an extended period of time. Rolling out a new solution that isn't immediately compatible with what's already been implemented could prove disastrous.
Though I think the common consumer wouldn't possess the knowhow to leverage the hole you're concerned about. The difficulty would be in convincing a business manager that.