|
|
Log in / Subscribe / Register

TLS certificate management on Android

TLS certificate management on Android

Posted Mar 3, 2016 21:08 UTC (Thu) by flussence (guest, #85566)
Parent article: TLS certificate management on Android

I've found the best workaround is to use programs that ignore the system CA store and implement a TOFU policy for all certificates.

Somewhat ironically, Google itself has done the best job of conditioning me to click through TLS warnings with its GMail IMAP certs, which feel like they change on a daily basis.

to post comments

TLS certificate management on Android

Posted Mar 4, 2016 18:52 UTC (Fri) by mathstuf (subscriber, #69389) [Link]

They seems to rotate every other week or so. But it isn't a hard deadline; I've gotten the previous cert's fingerprint after a new cert fingerprint showed up.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds