4 ms·
Wait a second... Was the fake cert trusted by your phone? If affirmative, did you manually add the root cert from your fake CA or at least accepted that cert a
by mobiplayer 12y ago
Wait a second...
Was the fake cert trusted by your phone? If affirmative, did you manually add the root cert from your fake CA or at least accepted that cert as trusted?
If you didn't explicitly trust that cert and the application didn't complain we're in front of another completely wrong use of SSL.
- ecesena 12y agoNo, not trusted. That's why I was sad. The app failed to verify the certificate chain and silently continued over the (in)secure connection.