title: Understanding iOS Provisioning Profiles
body: <p>My understanding is that Provisioning Profiles are used to prevent your app from being installed and used on devices not authorized by you. However, I don't see how this can be enforced since anyone can create the profile they need.
  <br/>
  <br/>
  If I wanted to run app <code>com.company.app</code>, all I need to create the profile is the app id, which I have(<code>com.company.app</code>), the UUID of the phone I want to run it in, which I have because it's my phone, and the certificate of the developer which is not supposed to be secret since it holds the public key.
  <br/>
  <br/>
  So, what's keeping me from creating my own profile, installing it on my phone and run the app without the developer's authorization?</p>