Copy

Task #3309

add relevant HTTPS cert pins to FDroidCertPins

Added by Anonymous over 3 years ago. Updated over 2 years ago.

Status:ClosedStart date:04/26/2014
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:-
Target version:-
Component:

Description

FDroid includes HTTPS cert pinning, so we should include relevant certs that are not likely to change their private key. Here is a suggestion, add more as comments.

Related issues

Related to Bazaar - Feature #2669: implement pin/tofu/ca/prompt for Fdroid client Closed 11/27/2013
Related to Bazaar - Task #3308: update HTTPS cert pin for guardianproject.info Closed 04/26/2014
Related to Bazaar - Bug #3336: changing pin fingerprint in fdroid does not trigger any e... Closed 05/02/2014

History

#1 Updated by hans over 3 years ago

  • Status changed from New to Closed

AndroidPinning has been removed from the FDroid app for now until it is more stable. A change in the f-droid.org certificate caused AndroidPinning to mark it as invalid, even though browsers think it is fine. I'm going to close this in favor of moving activity to this bug report:

https://gitlab.com/fdroid/fdroidclient/issues/80

#2 Updated by hans over 2 years ago

  • Target version deleted (134)
Copy

Also available in: Atom PDF