Skip to content

Comment on The UDID leak is a privacy catastropheparent

Comments

No, you need a push token, which is a combination of device id and app id, and is only generated when the user authorizes the app for remote notifications. Additionally, you need a certificate on the server that is authorized to send messages to that app id.

The push token is static for the device installation: it is not in combination with the "app id".

http://stackoverflow.com/questions/2338267/is-the-apn-device...

Yeah, but the certificate used to push is.

Effectively, it's the same result: you can only push to one app with one set of credentials, and credentials are not shared between apps.

Good to know, thanks for the explanation.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.