Re:Tracking my phone's silent connections
by Shaaaaaaare on Sunday February 24, 2019 @07:33AM
(#19238338)
Unfortunately Google both supports and recommends this. Recently they've even made it easy for apps to automatically ignore any custom certificates added to the trust store, so they don't even have to bother to implement pinning.
[ Parent
| on HN ]
Yeah, I'm honestly not surprised. Apologies for the cynicism, but sometimes I wonder if the pushes for HTTPS-everywhere, certificate transparency and DoH are really more for the privacy of app developers instead of the privacy of users...
If you care about the privacy of users, you need software that the user controls, not the developer.
Therefore free software.