2 ms·
Browsers don't have to use the base os TLS libs.
by fulafel 5y ago
Browsers don't have to use the base os TLS libs.
- tgsovlerkhgsel 5y agoTrue, but I expect enough things to break that no non-desperate person would want to use that.
- Fradow 5y agoIn fact, Chrome does use its own TLS libs and don't have any trouble connecting on TLS 1.2 on Android 4.4. On the other hand, nearly every application use the base OS TLS libs and cannot connect anymore to servers that disabled TLS 1.0/1.1 on Android 4.4.
- fulafel 5y agoYep. But this is probably a good thing, since those out of date libs are likely to be vulnerable from today's POV. To engineer the app work remotely safely on such vendor-abandoned devices you need to basically assume you're running on a malware or rootkit compromised device, and just hope that by using your self bundled components you'll have better chances to survive in the core wars game because your app is not being specifically targeted.