Idea on how TOUCH-ID could function with apps

[Ritte]

Apple have stated that developers won't have access to the fingerprint scanner.
I can understand that they want to limit the access of the fingerprint for security reasons.
Several apps have passwords like Facebook, 1password, Dropbox etc..
The fingerprint scanner wold be really useful in those situations.
An easy solution would be to having ICloud keychain store password for apps, just like websites. A touch with your finger and you can access Facebook, 1password, mail, Dropbox, banking apps etc.

I would find very useful, since I use 1password a lot.
An easy solution and the developers won't have access to the fingerprint scanner.

 

[KieranDotW]

Apple didn't do this because people were afraid of having their fingerprint info given to other companies.

 

[Ritte]

Apple didn't do this because people were afraid of having their fingerprint info given to other companies.

Yes, but if the iCloud Keychain contains the creditals for the app login, the apps will never acces the fingerprint. Just like a wepage can't access other iCloud Keychain items or the fp.
You use fingerprint to login with iCloud Keychain into the app.

 

[madsci954]

Yes, but if the iCloud Keychain contains the creditals for the app login, the apps will never acces the fingerprint. Just like a wepage can't access other iCloud Keychain items or the fp.
You use fingerprint to login with iCloud Keychain into the app.

Apple may add this in the future. Would be a nice addition to the sensor.

 

[Carlanga]

That is what they are considering. We won't know until they make keychain available. In the conference they said they were limiting it for now...

 

[AngerDanger]

Why bother with iCloud? Why can't apple release an API for a method that simply returns true or false when called: isCorrectPrint()

You enter your Facebook password, scan your finger, and if it matches the record in the A7, it saves the password within Facebook. Allowing you to login whenever the system tells it that your fingerprint is correct.

 

[matttye]

Why bother with iCloud? Why can't apple release an API for a method that simply returns true or false when called: isCorrectPrint()

You enter your Facebook password, scan your finger, and if it matches the record in the A7, it saves the password within Facebook. Allowing you to login whenever the system tells it that your fingerprint is correct.

Why limit it to one print?

You should be able to make multiple password stores protected by one or more prints. That would allow for multiple users.

Or it would allow for even more security, because you could login to Twitter using your index finger, Facebook using your thumb, etc.

 

[Ritte]

Why bother with iCloud? Why can't apple release an API for a method that simply returns true or false when called: isCorrectPrint()

You enter your Facebook password, scan your finger, and if it matches the record in the A7, it saves the password within Facebook. Allowing you to login whenever the system tells it that your fingerprint is correct.

Because it's probably more secure because the apps never have have access to the FP. Not even encrypted.