Direct Web Distribution App Installs

Detection

Safari prompts user to trust developer domain and install app directly from website interface.

Fix (technical)

Go to (siehe ui_strings_ref)allations & Purchases \> Web \> set to „Don‚t Allow„ (DE: (siehe ui_strings_ref).

Fix (relational)

Discuss web security and risks associated with trusting unverified web developers.

Residual risk

Must be re-checked manually after major iOS system updates.

Sources

  • apple-support-118128-de

  • apple-support-105121-de