3 ms·
You're not forced to use system facilities for TLS on Android. Back when you needed up to date TLS support for your app on older Android versions you would use
by ce4 9y ago
You're not forced to use system facilities for TLS on Android. Back when you needed up to date TLS support for your app on older Android versions you would use e.g. BouncyCastle instead of the system's TLS facilities. Probably the same for iOS.
- sjtgraham 9y agoYou can still patch statically linked libraries. Either statically in an editor and resign or dynamically by changing page protection to rwx, and writing a jump to the alternative implementation. Latter requires entitlements, or jailbreak on iOS.
- saagarjha 9y agoSo just figure out which library they’re using and patch that.
- ce4 9y agoThat's right, there are many ways. I just wanted to point out that you could roll your own tls.