2 ms·

This situation is the same on Android, presuming you do not have a rooted device. On Android >7 third-party apps do not trust user certificates by default, and

This situation is the same on Android, presuming you do not have a rooted device. On Android >7 third-party apps do not trust user certificates by default, and a non-root user cannot install new system certificates. And afaik there is nothing stopping them from using custom crypto libraries that do not use the system roots at all. And of course, even if you could decrypt the HTTPS traffic the actual API payloads and endpoints need not be in any kind of human readable format.

dheera 5y ago
It's much, much easier to root Android than it is to jailbreak iOS. For one I run a rooted image to start with so I don't need to actually root it.
- tinus_hn 5y ago
  For what it’s worth, there’s just a normal way to install custom root certificates on iOS, no jailbreak required.
fomine3 5y ago
https://github.com/mitmproxy/mitmproxy/issues/2054 https://github.com/mitmproxy/mitmproxy/issues/2054