As a developer, David Tucker often runs up against one hurdle that can slow down the initial build of a mobile hypothesis: user management. Cognito is a tool for enabling users to sign up for and sign into web and mobile applications that you create. In addition to this functionality, it also allows for storage of user data offline, and it provides synchronization of this data. In this article, David will walk you through the process of configuring a user pool for your needs. Then, he will integrate this user pool with an iOS application and allow a user to log in and fetch the attributes associated with their user account.
Read more…
With iOS 10.3, Apple has gifted the world powerful new features, as well as fixes for critical security holes. For your typical iPhone user, it’s a really nice upgrade. For a software developer who is responsible for either a mobile website or a native app, it can be a huge pain, because Apple changed the confirmation alert into a new non-blocking dialog. For developers, there is a hidden change that has more important implications: the App Store had always received a special exemption from the old version of this alert, but that exemption has now been removed.
Read more…
HTTPS is a must for every website nowadays: Users are looking for the padlock when providing their details; Chrome and Firefox explicitly mark websites that provide forms on pages without HTTPS as being non-secure; it is an SEO ranking factor; and it has a serious impact on privacy in general.
Read more…
These days, understanding cyber-security is not a luxury but rather a necessity for web developers, especially for developers who build consumer-facing applications. In this article, Hagay Lupesko will show you how web developers can use HTTP headers to build secure apps. While the code examples are for Node.js, setting HTTP response headers is supported across all major server-side-rendering platforms and is typically simple to set up.
Read more…
The HTTP Public Key Pinning (HPKP) worked caused a lot of confusion. In the middle of the incredibly hectic process of running a major conference, it’s the last kind of issue anybody wants to have to deal with. In this article, Mathias Biilmann Christensen will explain how to issue a new certificate that uses the keys of the old expired SSL certificate.
Read more…
If you’re running a major bank or a secure site for whistleblowers, you’ll no doubt want to do anything you can to avoid possible man in the middle attacks. However, if you’re running a content-driven website, it’s just never worth it to use a security technique that could potentially take your whole site down close to permanently! Going offline is a much more severe threat than getting exposed to a sophisticated man-in-the-middle attack.
Read more…
The benefits of using a “content security policy” are many. Most importantly, it will stop your users from suffering any unsolicited scripts or content or XSS vulnerabilities on your website. In this article, Nicolas Hoffmann will introduce you to this technology, and he’ll explain why awareness is the most important advantage of CSP for website maintainers.
Read more…
SSL is the “S” in HTTPS. It adds a layer of encryption to HTTP that ensures that the recipient is actually who they claim to be and that only authorized recipients can decrypt the message to see its contents. In this article, Emerson Loustau will show you how to upgrade your website to HTTPS to improve your website, protect users and participate in the advancement of the Internet. And it won’t cost you anything!
Read more…
If you are creating a website, app or wearable that uses location data, building in responsible development and regulatory compliance from the very beginning is easy. In this article, Heather Burns will teach you how to build a healthy workflow for developing with location data by using best practice frameworks, providing users with privacy-friendly options, coding to development guidelines and working with an insightful regard for the law. By following this advice, you can create a responsible and legally compliant development process.
Read more…
In this article, Rachel Andrew will look at the basics of HTTP2 as they apply to web designers and developers. She’ll explain some of the key features of the new protocol, look at browser and server compatibility, and detail the things you might need to think about as we see more adoption of HTTP2. You will get an overview of what to consider changing in your workflow in the short and long term. Rachel will also include plenty of resources if you want to dig further into the issues raised. Her aim is to give you enough of the background to be able to make good decisions as you plan your move to HTTP2.
Read more…
