4 ms·

I'm not sure of the implications here, so, two questions: (1) What effect does this have on user-installed credentials, such as a certificate for OpenVPN? I us

I'm not sure of the implications here, so, two questions: (1) What effect does this have on user-installed credentials, such as a certificate for OpenVPN? I used to be able to install those myself, with a few taps. They did produce the ominous message about someone monitoring my network activity, of course. (2) Will users still be able to disable CAs in preferences? I routinely go through the list of CAs and disable anything I don't trust, mainly based on country of origin, so China, Russia, Turkey get shut off, et. al. Will this functionality still be available in Android 14?

pimterry 3y ago
1. No effect, as far as I can tell. User-installed credentials for other cases are unchanged, this just affects system-managed CA certificates 2. Yes - you can still manually soft-remove CAs through the Settings UI
redleader55 3y ago
There are several ways[1] for an Android app to trust a CA: - by default, using the system installed CAs - if specified in the app manifest, it can trust the user installed CAs - included with the app, also in the manifest, it can trust any CA the author of the app decided to trust [1] https://developer.android.com/training/articles/security-config https://developer.android.com/training/articles/security-con...