4 ms·
Android apps that fail to validate SSL
- V-2 11y agoIt's down.
- deleted 11y ago[deleted]
- harryf 11y agoBut not for me ;(
- rosswilson 11y agoNor for me
- kcorbitt 11y agoYeah, I'm getting "This page isn't available offline. Connect to the Internet and refresh to view it online." Obviously, I'm online.
- phireal 11y ago"Wow, this file is really popular! It might be unavailable until the crowd clears. Try again." Surely Google's infrastructure can manage to serve a spreadsheet!
- deleted 11y ago[deleted]
- alt_ 11y agoMirror: https://docs.google.com/spreadsheets/d/1LZx6Bis0L9bZ-B4jDvmamvQmnKpr-GVaDpokLR_b-HM/edit?usp=sharing https://docs.google.com/spreadsheets/d/1LZx6Bis0L9bZ-B4jDvma...
- stevecalifornia 11y agoSo what specifically are they meaning when they say "Fail to validate SSL"? Does that mean they are not certificate pinning?
- burnallofit 11y agoThe spreadsheet links to Vulnerability Note VU#582497 (http://www.kb.cert.org/vuls/id/582497 http://www.kb.cert.org/vuls/id/582497). This links to additional information in CERT Oracle Secure Coding Standard for Java (https://www.securecoding.cert.org/confluence/pages/viewpage.action?pageId=134807561 https://www.securecoding.cert.org/confluence/pages/viewpage....). That states that a compliant solution example may be found in "Android Application Secure Design/Secure Coding Guidebook" (http://www.jssec.org/dl/android_securecoding.pdf http://www.jssec.org/dl/android_securecoding.pdf). Which is written in Japanese.