Is it really bad practice or a bad idea to have a “common” provisioning profile?

Fot testing iPhone apps, it is a bad idea to have a development code that will run any application with com.mydomain. *?

Why?

EDIT:

See italic editing above.

+4
source share
2 answers

Are you talking about providing signatures for developing or distributing code?

I use general code signing for development (otherwise it would be absurd to run some sample code from the Internet or test applications).

However, for distribution, I get a unique identifier. I suggested that this is necessary. Just for the sake of security.

+3
source

I doubt that the provisioning profile is specific to the set of UUIDs. No one else can use the profile if they do not have your developer certificate and specific device.

However, you cannot test push notifications and in-app purchases using a shared profile.

+4
source

Source: https://habr.com/ru/post/1309821/


All Articles