Tagging Downloaded Applications

Protect yourself from potential threats. Any application downloaded to your Mac is tagged. Before it runs for the first time, the system asks for your consent -- telling you when it was downloaded, what application was used to download it, and, if applicable, what URL it came from.

Signed Applications

Feel safe with your applications. A digital signature on an application verifies its identity and ensures its integrity. All applications shipped with Leopard are signed by Apple, and third-party software developers can also sign their applications.

Application-Based Firewall

Gain more control over the built-in firewall. Specify the behavior of specific applications to either allow or block incoming connections.

Stronger Encryption for Disk Images

Give your data even more security. Disk Utility now allows you to create encrypted disk images using 256-bit AES encryption.

Enhanced VPN Client Compatibility

Connect to a broader range of VPN clients. Leopard supports Cisco Group Filtering as well as DHCP over PPP, which allows you to dynamically acquire additional configuration options such as static routes and search domains.

Sharing and Collaboration Configuration

Share any folder on your Mac by setting it up as a shared folder in the Get Info window or in the Sharing pane of System Preferences. You can also create and edit access control lists, share with individuals in your network directory, or contacts in Address Book.

Sandboxing

Enjoy a higher level of protection. Sandboxing prevents hackers from hijacking applications to run their own code by making sure applications only do what they're intended to do. It restricts an application's file access, network access, and ability to launch other applications. Many Leopard applications -- such as Bonjour, Quick Look, and the Spotlight indexer -- are sandboxed so hackers can't exploit them.

Multiple User Certificates

Have more flexibility in choosing a digital certificate for encrypting email messages. With support for multiple user certificates, you can use the Keychain application to associate your certificates with various email addresses.

Enhanced Smart Card Capabilities

Let your smart card do more. Now you can use a smart card to unlock FileVault volumes and your keychain, and configure your Mac to lock the screen when a smart card is removed. Leopard supports the PIV standard for Federal employees and contractors.

Library Randomization

Defend against attackers with no effort at all. One of the most common security breaches occurs when a hacker's code calls a known memory address to have a system function execute malicious code. Leopard frustrates this plan by relocating system libraries to one of several thousand possible randomly assigned addresses.

Windows SMB Packet Signing

Enjoy improved compatibility and security with Windows-based servers.