We're designing a background service to expose some potentially sensitive user data through Cortana on Windows 10 machines. It's not highly sensitive PII like SSNs, but we still don't want unauthorized apps to be able to call our service.
My question is whether there are any authorization checks in place that ensure that only Cortana can call our background service. Can other apps that the user is running call our background service and get the data? Can apps running as a different user on the machine call our background service and get the data?
Thanks in advance for your help!
My question is whether there are any authorization checks in place that ensure that only Cortana can call our background service. Can other apps that the user is running call our background service and get the data? Can apps running as a different user on the machine call our background service and get the data?
Thanks in advance for your help!
Facebook
Twitter
Instagram