What

For Cordova, there are 2 options:

1. Wrap the security module from the iOS and Android SDKs.
2. Use javascript as much as possible, and only use plugins for the things that we can not get in Js.

We need to perform a spike and evaluation which approach we should take. We should consider the following:

• what features we can support. The features we are looking at including:
  • root/jailbreak detection
  • emulator/simulator detection
  • debuggable/developer mode detection
  • device lock detection
  • device encryption detection
  • backup detection
  • allow developers provide their own implementation
  • report security checks metrics
• maintenance cost
• user experience for end developers

If possible, a proposal should be created on which approach we should take, based on the results of the evaluation.