Google Online Security Blog: Protecting users with TLS by default in Android P

Security Blog

The latest news and insights from Google on security and safety on the Internet

Protecting users with TLS by default in Android P

12 de abril de 2018

Posted by Chad Brubaker, Senior Software Engineer Android Security[Cross-posted from the Android Developers Blog]announcedandroid:usesCleartextTrafficNetwork Security ConfigHow do I update my app?
Why should I use TLS?
blog postDeveloper Summit talkIsn't TLS slow?
No, it's not.How do I use TLS in my app?
SSLSocketFactorySocketFactorySSLSocketgetDefaultHostnameVerifier()HostnameVerifier.verify()I need to use cleartext traffic to
network security configAllow cleartext connections to a specific domain
<network-security-config> <domain-config cleartextTrafficPermitted="true"> <domain includeSubdomains="true">insecure.example.com</domain> <domain includeSubdomains="true">insecure.cdn.example.com</domain> </domain-config> </network-security-config>Allow connections to arbitrary insecure domains
<network-security-config> <domain-config cleartextTrafficPermitted="false"> <domain includeSubdomains="true">example.com</domain> <domain includeSubdomains="true">cdn.example2.com</domain> </domain-config> <base-config cleartextTrafficPermitted="true" /> </network-security-config>
How do I update my library?isCleartextTrafficPermitted

Google

Marcadores: android security

Nenhum comentário :

Postar um comentário

Marcadores

#sharethemicincyber
#supplychain #security #opensource
android
android security
android tr
app security
big data
biometrics
blackhat
C++
chrome
chrome enterprise
chrome security
connected devices
CTF
diversity
encryption
federated learning
fuzzing
Gboard
google play
google play protect
hacking
interoperability
iot security
kubernetes
linux kernel
memory safety
Open Source
pha family highlights
pixel
privacy
private compute core
Rowhammer
rust
Security
security rewards program
sigstore
spyware
supply chain
targeted spyware
tensor
Titan M2
VDP
vulnerabilities
workshop

Archive

2024
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2023
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2022
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2021
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2020
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2019
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2018
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2017
- dez.
- nov.
- out.
- set.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2016
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2015
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2014
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- abr.
- mar.
- fev.
- jan.

2013
- dez.
- nov.
- out.
- ago.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2012
- dez.
- set.
- ago.
- jun.
- mai.
- abr.
- mar.
- fev.
- jan.

2011
- dez.
- nov.
- out.
- set.
- ago.
- jul.
- jun.
- mai.
- abr.
- mar.
- fev.

2010
- nov.
- out.
- set.
- ago.
- jul.
- mai.
- abr.
- mar.

2009
- nov.
- out.
- ago.
- jul.
- jun.
- mar.

2008
- dez.
- nov.
- out.
- ago.
- jul.
- mai.
- fev.

2007
- nov.
- out.
- set.
- jul.
- jun.
- mai.

Feed

Follow

Give us feedback in our Product Forums.

Google
Privacy
Terms