The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux
To test if impacted visit or curl this site: https://dv-g3b-emudhra.we-have-a-problem.com/
The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux
To test if impacted visit or curl this site: https://dv-g3b-emudhra.we-have-a-problem.com/
All major browsers have already updated to not trust their SSL certificate. It should show an error on all major browsers.
That only covers mainstream web browsers
Any apps that rely on https will be vulnerable
Apps using system webview are already mitigated. Apps using system HTTPS connection protocols and SSL libraries are also mitigated. Now, for some apps which ship and use their own SSL library and do not use google safe browsing or update the cert list online they could be vulnerable.
The vast majority of app network requests would be secured by getting the TrustStore patch via Play Services, with only exceptions shipping their own crypto stack needing to update to be secured.
Still, updating your apps regularly is good practice that you should follow anyway
Don’t forget custom roms
That’d hopefully be solved with an update to that ROM in that case.
I wonder if that would be with Googles now twice-yearly released security updates. That’s a long time between security updates.