4 ms·

If you have root, can you not install SSL certificates?

• dasil003 9y ago
  I am totally ignorant of Android, but they could be pinning, and do so in such a way that it fails silently without sending data. As root you could probably detect this but you'd really have to know what you were looking for.
  • userbinator 9y ago
    As root you could probably detect this but you'd really have to know what you were looking for. I can think of two relatively easy and probably-not-secure (you were asking for freedom, not security...) ways to not only detect but also bypass this: - Hook certificate verification APIs to always return true. - Scan for certificates embedded in the binary and overwrite them dynamically. This will work if the app decides to use its own crypto but standard certificate formats.
• zeveb 9y ago
  And if you have root, then your device fails to attest. Who owns your device: Google or you? This is about control.
• amckinlay 9y ago
  You don't have root, that was a typo, sorry. I cannot go back and edit the post.