How is it going to be harder to run apps that haven’t been notarized in Sequoia, and does it bring any benefit in return for the inconvenience?
certificates
Differences between file-based keychains including the login keychain, and Data Protection keychain. How the Passwords app in Sequoia caters for the latter.
iCloud Keychain is apparently the way ahead, but even Apple has a great deal more work to do before that’s feasible. A look at what’s needed.
macOS has two types of keychain, and its tools for working with them, Keychain Access and the command tool security, only work fully with one type.
Ventura aims to improve app security by checking integrity of apps and command tools whenever they’re run. How can it do that without significant overhead?
Are additional Gatekeeper checks in Ventura effective, and worth the effort? Surely malware can bypass them easily.
What are keychains? What do they store? Which are essential on Macs, and why do you get prompted to enter your password for access to them? How secure are they in iCloud?
GUI software and the commands you need to get the signature of an app checked thoroughly by macOS, plus a detailed list of error code.
App signatures are about more than just the certificate. That provides a chain of trust going back to Apple, and supports integrity checks and entitlements.
There have been changes to the way that macOS 12 checks executable code when asked to run it. Summarised in a diagram.
