@pimterry@lemmy.world to Programming@programming.dev • 10 months agoAndroid 14 blocks all modification of system certificates, even as roothttptoolkit.comexternal-linkmessage-square57fedilinkarrow-up1271arrow-down15cross-posted to: tech@links.roobre.esnetsec@lemmy.worldhackernews@lemmy.smeargle.fanshackernews@derp.footechnews@radiation.partyandroid@lemmy.world
arrow-up1266arrow-down1external-linkAndroid 14 blocks all modification of system certificates, even as roothttptoolkit.com@pimterry@lemmy.world to Programming@programming.dev • 10 months agomessage-square57fedilinkcross-posted to: tech@links.roobre.esnetsec@lemmy.worldhackernews@lemmy.smeargle.fanshackernews@derp.footechnews@radiation.partyandroid@lemmy.world
minus-squareHTTP_404_NotFoundlinkfedilinkEnglish20•10 months ago System Certificates Aka, you cannot untrust google’s certs. And google can do whatever the fuck they want, and you cannot change or alter that behaviour. So, if google wants to publish a root CA, that allows them to act on behalf of any other domain, they can do that. etc.
minus-square@Jaysue@sh.itjust.workslinkfedilink3•10 months agoSounds like a powerful tool for law enforcement
minus-squareHTTP_404_NotFoundlinkfedilinkEnglish3•10 months agoNow, If only google didn’t give out information without a valid search warrant… Or, didn’t sell your data.
Aka, you cannot untrust google’s certs. And google can do whatever the fuck they want, and you cannot change or alter that behaviour.
So, if google wants to publish a root CA, that allows them to act on behalf of any other domain, they can do that. etc.
Sounds like a powerful tool for law enforcement
Now, If only google didn’t give out information without a valid search warrant…
Or, didn’t sell your data.