pimterry@lemmy.world to Programming@programming.dev · 1 year agoAndroid 14 blocks all modification of system certificates, even as roothttptoolkit.comexternal-linkmessage-square56fedilinkarrow-up1267arrow-down15cross-posted to: tech@links.roobre.esnetsec@lemmy.worldhackernews@lemmy.smeargle.fanshackernews@derp.fooandroid@lemmy.world
arrow-up1262arrow-down1external-linkAndroid 14 blocks all modification of system certificates, even as roothttptoolkit.compimterry@lemmy.world to Programming@programming.dev · 1 year agomessage-square56fedilinkcross-posted to: tech@links.roobre.esnetsec@lemmy.worldhackernews@lemmy.smeargle.fanshackernews@derp.fooandroid@lemmy.world
minus-squareHTTP_404_NotFound@lemmyonline.comlinkfedilinkEnglisharrow-up20·1 year ago System Certificates Aka, you cannot untrust google’s certs. And google can do whatever the fuck they want, and you cannot change or alter that behaviour. So, if google wants to publish a root CA, that allows them to act on behalf of any other domain, they can do that. etc.
minus-squareJaysue@sh.itjust.workslinkfedilinkarrow-up3·1 year agoSounds like a powerful tool for law enforcement
minus-squareHTTP_404_NotFound@lemmyonline.comlinkfedilinkEnglisharrow-up3·1 year agoNow, If only google didn’t give out information without a valid search warrant… Or, didn’t sell your data.
Aka, you cannot untrust google’s certs. And google can do whatever the fuck they want, and you cannot change or alter that behaviour.
So, if google wants to publish a root CA, that allows them to act on behalf of any other domain, they can do that. etc.
Sounds like a powerful tool for law enforcement
Now, If only google didn’t give out information without a valid search warrant…
Or, didn’t sell your data.