4 ms·
Note that in this particular case you can still use alternative browsers that come with updated root CAs.
by SkiFire13 3y ago
Note that in this particular case you can still use alternative browsers that come with updated root CAs.
- Karunamon 3y agoThis will still break anything that uses a system webview.
- hunter2_ 3y agoAnd also any apps that make API calls over HTTPS, regardless of webview, right? I believe they cannot use HTTP, only HTTPS. However, I'm unsure whether they can disable certificate verification. Presumably not, for the same reason...
- KeepFlying 3y agoI think it was apple that forced the use of HTTPS in app APIs, not Google. I don't believe android apps are locked to HTTPS as a rule, though obviously a lot of them likely don't have fallbacks.