News for hackers. Stuff that matters.

A comment on Shortening the Let's Encrypt Chain of Trust. Parent comment

Re:Shortening the Let's Encrypt Chain of Trust by hunter2_ on Tuesday July 11, 2023 @10:21AM (#36681365)
And also any apps that make API calls over HTTPS, regardless of webview, right? I believe they cannot use HTTP, only HTTPS. However, I'm unsure whether they can disable certificate verification. Presumably not, for the same reason...
[ Parent | on HN ]
Re:Shortening the Let's Encrypt Chain of Trust by KeepFlying on Tuesday July 11, 2023 @01:07PM (#36683935)
I think it was apple that forced the use of HTTPS in app APIs, not Google.

I don't believe android apps are locked to HTTPS as a rule, though obviously a lot of them likely don't have fallbacks.

[ Parent | on HN ]