3 ms·
On Android, since 8.0, users can not override the CAs that applications use anymore. With SSL everywhere, you can't use a VPN to intercept anymore, as you can'
by kuschku 9y ago
On Android, since 8.0, users can not override the CAs that applications use anymore.
With SSL everywhere, you can't use a VPN to intercept anymore, as you can't get your own CA into the truststore.
This means ad blocking in apps is now impossible.
Okay, because everyone just downvotes this without reason, here's Google's official Android Dev blog stating exactly the same I just did: https://android-developers.googleblog.com/2016/07/changes-to-trusted-certificate.html https://android-developers.googleblog.com/2016/07/changes-to...
- craftyguy 9y agoUm, you can still import custom SSL certs into Android 8.0's trust store. I do this for connecting to my OpenVPN instance.
- kuschku 9y agoYou can import into the User CA store, not into the system CA store. Since 8.0 these are separate, apps have to explicitly opt in to using user CA certs as well. For example, Google's News app doesn't, and as result you can't ad block on the articles it shows.
- craftyguy 9y agoI see. Thanks for the clarification.
- userbinator 9y agoOkay, because everyone just downvotes this without reason Notice the massive downvoting of other, otherwise reasonable, comments here too --- that is because any discussion around security seems to trigger a primitive instinct of fear, the very thing that corporations and governments have learned to harness and exploit to their advantage. It is really the same as the terrorism and "think of the children" arguments, and just as hard to have reasonable discussion or even opposition to.