2 ms·
Totally against this. Why not leave the choice to the user instead of Google enforcing this. MITM is good for some purposes, e.g, debugging, enterprise filterin
by ausjke 10y ago
Totally against this. Why not leave the choice to the user instead of Google enforcing this. MITM is good for some purposes, e.g, debugging, enterprise filtering etc.
While google collects all my info by default these days, what's wrong to let me install my CA locally myself? Google is becoming an online policeman more and more these days.
I now hope Firefox OS or Ubuntu Phone OS prevails. Also I'm hoping there is a strong google search competitor soon. I no longer favor Google, though it's difficult to find an alternative at this point.
- JoshTriplett 10y ago> Why not leave the choice to the user instead of Google enforcing this. Because often the choice isn't made by the user. > MITM is good for some purposes, e.g, debugging The linked page documents how to enable custom CA certificates for debugging. If you're trying to debug an app that doesn't want to be debugged, you're probably running a custom rooted version of Android anyway. > enterprise filtering Which the user should be explicitly aware of if it's happening.
- ausjke 10y ago1. Then make some password-protect mechanism instead of taking that choice away. That's the key issue, that Google is trying to make decisions for its users because Google may think it knows better. 2. OK thanks. 3. That is a corporate policy issue, it can state all corporate network is monitored and it installed a local CA etc. Without a local CA all https sites will pop up warnings and it leads to more problems. By the way corporate normally tunnels a safe list of https sites without doing any MITM, such as banks, well known "good" websites etc.