Developer builds macOS Data Protection Keychain library for Electron apps
A developer working on Hansel, an encrypted personal data store, created a new open-source library to bring macOS Data Protection Keychain support to Electron applications. The tool addresses a security gap in Electron's built-in safeStorage API, which relies on a legacy file-based keychain accessible to other apps via the macOS 'security' command-line tool. This poses a risk in environments where multiple background agents are running simultaneously. The Data Protection Keychain improves on this by restricting access through code-signing access groups and supporting authentication rules such as Touch ID or password prompts.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in