Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Its always been pretty easy to insert a network configuration file into an app apk's Manifest to get it to support user installed certificates so you can route ssl connections through an ssl proxy.

Its actually kind of annoying that it isn't just an OS feature (hidden behind a scary settings option that's also hidden behind being in developer mode) to enable user installed certs for any installed application. Much less annoying to debug network issues on iOS because of this and Android isn't really any more secure for it.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: