3 ms·

I looked at the 4.4 (Kitkat) source code and it seems to me that the HEARTBEAT is disabled. https://android.googlesource.com/platform/external/openssl.git/+/and

by biafra 13y ago

I looked at the 4.4 (Kitkat) source code and it seems to me that the HEARTBEAT is disabled. https://android.googlesource.com/platform/external/openssl.git/+/android-4.4.2_r1/build-config.mk https://android.googlesource.com/platform/external/openssl.g... contains -DOPENSSL_NO_HEARTBEATS I am also unclear whether Dalvik or ART use OpenSSL for TLS connections.