Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: Certificate transparency for Android #81

Open
sublime392 opened this issue Aug 8, 2022 · 1 comment
Open

Feature request: Certificate transparency for Android #81

sublime392 opened this issue Aug 8, 2022 · 1 comment
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@sublime392
Copy link

sublime392 commented Aug 8, 2022

As I understand it (absolutely could be wrong),

  1. Certificate pinning is on the outs, with Android explicitly recommending against it.
  2. Certificate transparency is a useful alternative to pinning.
  3. iOS supports certificate transparency by default, but Android does not. ( Noted halfway down this article from 2020 )
  4. This package supports everything http-related except for certificate transparency.

Assuming the above is correct, would it make sense for this package to support certificate transparency(CT), since CT seems to essentially be a replacement for pinning?

@jerbob92
Copy link
Contributor

To support certificate transparency we need to have support for it in okhttp, they don't seem to support it yet.

There seems to be a way to do it through an external library and use a network interceptor: https://github.com/appmattus/certificatetransparency/blob/main/docs/okhttp.md

If anyone wants to implement this I will accept PR's for it.

@jerbob92 jerbob92 added enhancement New feature or request help wanted Extra attention is needed labels Oct 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants