iVerify (iOS Device Scanning Tool)

@ExcitingManatee Yeah, I’ve been thinking about posting more about this lately.


I’ve kind of changed my mind on my stance against iVerify being recommended actually, with an understanding of the limits on what it can do I can still see it having a place in someone’s security lineup.

I’m drafting a new page on mobile device verification/integrity tools here:

Sounds good, would the discussion shift to GitHub or stay here?

Here if you have any feedback about iVerify that we should consider.

One thing is their app offers encrypted DNS which shouldn’t be used for reasons outlined in the PG article on the topic. Aside from that, I think everything they offer is useful.

We do recommend encrypted DNS though, unless you mean in conjunction with a VPN?

Ah right I was thinking in the context of the VPN article. It may still be worth mentioning regardless. Also, I’m not sure it meets the criteria for recommendation since they don’t mention whether it uses DNSSEC or QNAME minimization.

It only supports 3 different servers (two of which are listed on DNS Resolvers - Privacy Guides and therefore should meet our criteria). It’s not something we’re going to suggest using, but I don’t think it can be configured in a harmful way that would require us to note a suggestion against using it either.

Does anyone know what the iVerify Safari extension does?

It has an option to force HTTPS (safari by default can prefer but not force HTTPS). It also offers alternative DNS.

2 Likes

Locked as completed