2

This is a new T-Mobile Samsung Galaxy S7.

Is it normal to have all these certificates? Many look dodgy.

all default certificates on S7

Image resized. Click to see full-version

  • 2
    Completly normal. Just the usual list of Certificate authorities. As you can see - all of them were imported by the system - not a user. they are pretty much on every smartphone - no need to worry in my opinion – benjamin May 2 '16 at 11:46
5

Yes, it is normal to have these security certificates.

To trust a security certificate you encounter on the Internet, your device needs a way to verify a certificate is good. You can't just accept any certificate that is presented because any adversary able to become a man-in-the-middle (like a public WiFi access point) would be able to spoof any website.

This problem has been solved by giving each device a list of certificates initially, like the one you have shown, and requiring all certificates to have a chain of valid certificates (signed, not expired) that terminates with a trusted certificate. These initial trusted certificates are for organizations that are in the business of signing certificates for other organizations. People need certificates all over the world which is why there are certificates for authorities from all over the world. To verify a certificate, the device looks for a chain of valid certificates.

This means that if you run a server and want a certificate, you have to go to one of the companies that issues certificates (often called a certificate authority) and get them to sign a certificate for you to identify your server. The certificate includes the name of the server so you cannot just take a certificate and use it anywhere.

With certificates, an adversary can still try to spoof any website, but if you require a certificate (use HTTPS) the client can detect the spoofing.

1

The certificates are very necessary! Without them your phone would just say that any site you visit is trying to steal your data and is not secure.

protected by Community Jun 11 '18 at 6:25

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.